last executing test programs: 33.276732092s ago: executing program 4 (id=1497): r0 = socket$can_j1939(0x1d, 0x2, 0x7) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc100) write$P9_RREMOVE(r2, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3, 0x3, {0x2, 0xf0, 0x2}, 0xff}, 0x18) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xe2d9, 0x7, [0xffff, 0x0, 0xb9a, 0x7, 0x6, 0xa3, 0x6]}, &(0x7f0000000140)=0x16) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0xdee, 0x3, 0x9, 0x101, 0xb5, 0x6, 0x3, 0x80, r4}, &(0x7f00000001c0)=0x20) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x800) sendmsg$can_raw(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=@canfd={{0x1}, 0x2e, 0x0, 0x0, 0x0, "52f49343c418aa80f8c60842ac451a7a9df402666b35462ea20d20064dd1dc7f82a533990b43ece6e9193193c188b9d09b2bc1a5ba1b14bfb18a6ccbc50dd7e5"}, 0x48}, 0x1, 0x0, 0x0, 0x20040084}, 0x80) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x2}}, 0xd23, 0x2}, &(0x7f0000000440)=0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000480)={r6, 0x10001}, 0x8) bind$inet(r5, &(0x7f00000004c0)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000500)={'vcan0\x00', 0x2000}) r7 = openat$ttyS3(0xffffff9c, &(0x7f0000000540), 0x40000, 0x0) ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000000580)) r8 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r8, &(0x7f00000005c0)={0x1d, r3, 0x0, {0x2, 0xff, 0x1}, 0xff}, 0x18) r9 = syz_open_dev$radio(&(0x7f0000000600), 0x2, 0x2) r10 = socket$isdn(0x22, 0x3, 0x3) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x10010, r10, 0xe3251000) bind(r5, &(0x7f0000000640)=@isdn={0x22, 0x9, 0x8, 0x5, 0xf}, 0x80) fsconfig$FSCONFIG_CMD_RECONFIGURE(r10, 0x7, 0x0, 0x0, 0x0) socket$inet(0x2, 0x800, 0x96) r11 = dup(r9) sendmsg$nl_route(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_getnexthop={0x3c, 0x6a, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4058095}, 0x5) fsetxattr$trusted_overlay_upper(r2, &(0x7f00000007c0), &(0x7f0000000800)={0x0, 0xfb, 0xd5, 0x4, 0x41, "b2e85177f4fae678cea95f36feebef1a", "7cd06c08c728ba297a377d9428adfdb210b6ec860b42611c4cd44993f5499c5bc18ac9d83513aaedbc478654426e01c1e9e99ebc9fd1d27ae5bb9ad088fba9441a249146f893bfa3b5cfa1202e202b75df27c9315e98b8f03a5cd75b6efb66225b56efdf5943a569acc405853d531eec15202d05925f0150e9b31f463b3d000e75f332a14cfd4904cad48122974401f0d5097c3b231ab9dcc983ea7badee4eeb0a0fc68b75e4c18ad57620f5a7f6dfb1f05c2e4be3ce5e241aa8ea2e789c7c50"}, 0xd5, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r10, 0x8983, &(0x7f0000000900)) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, 0x13, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in=@initdev}}, &(0x7f0000000b40)=0xe8) quotactl_fd$Q_GETQUOTA(r10, 0xffffffff80000701, r12, &(0x7f0000000b80)) 31.542489706s ago: executing program 4 (id=1501): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x40284}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x1c, &(0x7f0000000080)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0x1, 0x0, '$', "fb323c", 0x80f3, "691c"}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x40}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 30.520148251s ago: executing program 4 (id=1504): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x49e, 0x8000, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x2}) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r3, r4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000000c0)=0xb) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x70bd25, 0xfffffffc, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000002500)) 28.095995293s ago: executing program 2 (id=1508): ioperm(0x0, 0xfff, 0x7) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x3) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 25.987745897s ago: executing program 2 (id=1515): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x4e24, 0x3cd, @remote, 0x3}}}, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000000000)=0x3) ftruncate(r1, 0x1ff) 24.776881812s ago: executing program 2 (id=1518): unshare(0x22020400) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) 24.294470902s ago: executing program 4 (id=1519): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="240000003a000b0000000000001c000003000000040099ca4c3480288f68bec2840000000000000810"], 0x24}}, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file2\x00', 0x800, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x4, 0x80000001, 0xb45, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000200)='./file0\x00', 0x0, r8) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000980), 0x1, 0x3e3, &(0x7f00000004c0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000008c0)={0x0, 'veth0_vlan\x00', {}, 0x6}) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r10, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x171c, 0x0, 0x0, 0x0, 0x8, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000010000000000000f0ffefffff5aff000001"}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000540)=[0xee00, 0xee00, 0x0]) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x1, 0x1e5, &(0x7f0000000400)="$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") r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800c3, 0x0) fcntl$setlease(r13, 0x400, 0x0) r14 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0, 0x0) renameat2(r14, &(0x7f00000001c0)='./file0\x00', r14, &(0x7f0000000100)='./bus\x00', 0x0) unlinkat(r14, &(0x7f0000000180)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010004000000000002000300", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="02000300", @ANYRES32=r3, @ANYBLOB="02000300", @ANYRES32, @ANYBLOB="040000000000000008000200", @ANYRES32, @ANYBLOB="08000600", @ANYRES32=r5, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="08000500", @ANYRES32=r8, @ANYBLOB="08720004", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r12, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="10000500000000002000040000000000"], 0x94, 0x1) 23.025647113s ago: executing program 2 (id=1522): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000280), 0xfc, 0x57c, &(0x7f00000013c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000200)='./bus\x00', 0x161b42, 0x0) sendfile(r2, r1, 0x0, 0x100800001) r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r3, r0, 0x0, 0x80006800) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000002c0)='./mnt\x00', 0x0, &(0x7f0000000540)={[{@journal_checksum}, {@mblk_io_submit}, {@nomblk_io_submit}, {@init_itable_val}, {@resgid}, {@nombcache}, {@nodiscard}, {@jqfmt_vfsv1}]}, 0x1, 0x24f, &(0x7f0000000600)="$eJzs3TFoJFUcBvBvZmc9926RUxtBUEFENBDOTrBZG4UDOQ4RQYUTERvlTjjvsLtY2VhorZLKJoid0VLSBBtFsIqaIjaCBgWDhRYrs7uBNYkkusmOOL8fzO7M7nvzf8PM96aa3QCtdTbJIEknyUKSbpJiusE94+XsZHO5t34pGQ6f/LkYtRtvj+32O5NkKcnDSdbKIi9XyfXVZ7d+23j8/reude/7YPWZ3lwPcmJ7a/OJnfcvvPnx+Yeuf/n1jxeKDNL/y3Edv+KAz6oiue0kiv1HFFXTI+AoLr7+0Td17m9Pcu8o/92UGZ+8t6/etNbNg+/9Xd93fvrqznmOFTh+w2G3vgcuDYHWKZP0U5SLScbrZXd3bvi2c7p85crV1xZeunLt8ovNzlPA8eknm499euqTM3vy/0OnLBcXmx4dcJLq/D91ceW7en2n0/RogHmq87/w/I0HIv/QOvIP7dUfyD+0lfs//M8Mjt5U/qG95B/aS/6hveQf2kv+ob3kH9prOv8AQLsMTzX9BDLQlKbnHwAAAAAAAAAAAAAAAAAAYL/l3vql3WVeNT9/N9l+NElVHFC/M/o/4uTm0evpX4tUU32LutuM9Z+7e8Yd7PXLP2v+YcNPX9/yfbP1v7jrhAsc8rt2Ny4nS28kOVdV+6+/YnL9/Xu3HvJ994UZC8zokaebrf/HSoPFq+T8RvJZPf+cm57/epMGZe4YvR88//Tr8zfjEF79fcYdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDd/BgAA//+s920g") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x709, 0x0, 0x0, {{0x5}, {@val={0x8, 0x117}, @void}}}, 0x1c}}, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r6, 0x0, 0x0) 21.812503992s ago: executing program 4 (id=1527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}, 0x1c) (async) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x20000000) (async) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000a40)={0x0, 0x0, 0x7, 0x0, '\x00', [{0xc00, 0x5, 0x8, 0x8, 0x3, 0x97b5}, {0x6, 0x8, 0x0, 0xe, 0x80000001, 0x3}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x4c, 0x2c3, 0x0, 0xaf03034a, 0x248, 0x2e8, 0x2e8, 0x248, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'geneve0\x00', 'batadv_slave_1\x00'}, 0x0, 0x100, 0x168, 0x0, {0x68000000}, [@common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c01}}, @common=@inet=@set1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) (async) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file1\x00') (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) unlinkat(r2, &(0x7f0000000140)='./file1\x00', 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, 0x0) 21.42971605s ago: executing program 2 (id=1529): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x0, 0x5b5, &(0x7f0000002a80)="$eJzs3c9vVNUeAPDvnZkWSt977SMvT3FhGg2BRGlpAYM/FrAnBH/s3FhpIcjwI7RGiyaWBDcmxo0LElcuxP9CiW5dmbhw4caVIUFj2GiMjrkzd4ZhOtNOS4dbez+f5Lbn3HNvz7nQb8+Ze8+ZCaCwJtIvpYg9EXE5iRhrK6tEVjjROO7ur++eTrckarWXf0kiyfalRyVt541mJ/85FvHtV0nsLq+sd2Hp6vnZanX+SpafWrxweWph6eqBcxdmz86fnb8488zM0SOHjxydPvhA11dqS5+4/sZbYx+cfPWzT/5Ipj//4WQSx+LnM42y5nVspomYiN9qtfc696f/rkc3u7KclFu/J/cknTvYsipZjAxHxCMxFuW2/82xeP/FXBsHDFQtiagBBZWIfyio5jig+dq+v9fBpQGPSoCH4c7x9OtQl/ivNO4NxngMRcTejvO63NLbkLSOb74+eT3dYkD34YDulq/tyFKd8Z/UY3M8dtZzu+6W7rvPm44ATmXf0/0vbbD+iY68+IeHZ/laRDzabfy/dvy/1hb/r2+wfvEPAAAAAAAAm+fW8Yh4utvzv1L2bG5nPFF//pc0nv99d2+F4LFNqH/t53+l2x2HJJtQLZDN/3uh6/zf1hzf8XKW+3djNmBy5lx1/mBE/Cci9sfQjjQ/vUodBz7cfaNXWfv8v3RL62/OBczacbuy4/5z5mYXZx/kmoGGO9ciHqv0nv+T9v9Je/+fSf8eXO6zjt17b57qVbZ2/AODUvs0Yl/X/v/eMDtZ/f05purjganmqGClx9/56Ite9Yt/yE/a/+9aPf7Hk/b361lY388fjohDS5Var/KNjv+Hk1fKzZ+fent2cfHKdMRwcmLl/pn1tRm2q2Y8NOMljf/9T65+/681/m+Lw5GIWO6zzv//NfpjrzL9P+Qnjf+5dfX/60/M3Bz/slf9/fX/h+t9+v5sj/t/sLp+AzTvdgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP1EpIv4VSWmylS6VJicjRiPif7GrVL20sPjUmUtvXpxLy+qf/19qftLvWCOfND//f7wtP9ORPxQR/42Ij8sj9fzk6UvVubwvHgAAAAAAAAAAAAAAAAAAALaI0R7r/1M/lfNuHTBwley7eIfiqeTdACA34h+KS/xDcYl/KC7xD8W1wfj3uAC2Af0/FNVQf4ftHHQ7gDzo/wEAAAAAYFu59fyzN5KIWH5upL6lhrOy1oPBkbxaBwxSKe8GALkxhxeKy9QfKK4+J/8C21jSSv1e61bee/Z/MpgGAQAAAAAAAAAAAAAr7Ntz6/s11/9H1KwThO3H+n8oLv06FJf1/1Bc1v8Da63it/4fAAAAAAAAAAAAAPK3sHT1/Gy1On9FQmKrJYYiYgs0I4fEcP7hmfMfJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOXvAAAA//9JxiYA") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000400)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x2, 0x90, [0x0, 0x20000040, 0x20000070, 0x200000a0], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000816f0166d300000000000000000000000000e3ffffff0000feffffff0000b60000000000000000000000000000000000000000000000000001000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffff000000"]}, 0x108) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x3, 0x0, 0xfffffff7}}]}]}}}]}, 0x68}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@ssrr={0x89, 0x7, 0xce, [@remote]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 20.637081786s ago: executing program 4 (id=1532): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r0, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0xd}) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004e835c10e80430ff2154010203010902240001000000000904"], 0x0) eventfd2(0x4, 0x1) 11.960579078s ago: executing program 2 (id=1548): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0a00ff000000007110630000000000950002000000000036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x8880) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[], 0x20) 8.268893149s ago: executing program 1 (id=1557): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r1 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x193) lseek(r1, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x64, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) r3 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a0a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) getdents(r1, 0x0, 0x0) r4 = socket$inet(0x2, 0xa, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r5 = accept4(r1, 0x0, &(0x7f0000000400), 0x800) sendmsg$nl_generic(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x26000814) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022d00010000000009040000035883b20009050900000000000009058501001000"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x5f, 0x2e, 0xaa67eeefc217049c]}}, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="2bd1598df75c98a6936444aa68d948213365771a20eb8b0338634fc5b0ef9432584af949108856571424758106273e2a06a088a30c2b700286f933c1b5a338e8f15fff2559eb545e1e8cfcb73d18c15dfaf04550bbd479aca9d59f408a7f8647ee014f5c0325ae447fc915d6a5ba5ddd204b1d4f3c83fc3a8b2e79726653e96d", 0x80}], 0x3e}}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x8, 0x1, 0xa, 0x5, {{0x5, 0x4, 0x1, 0x1, 0x14, 0x64, 0x0, 0x8, 0x29, 0x0, @remote, @multicast2}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', r6, 0x2f, 0xa, 0x9, 0x1ed, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x20, 0x80, 0xe0ca, 0x3}}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, r7, 0xa}, 0xc) r8 = openat$drirender128(0xffffff9c, &(0x7f0000000600), 0x1, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000680)={0x3, &(0x7f0000000640)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r8, 0xc0086421, &(0x7f00000006c0)={r9, 0x1}) openat$ocfs2_control(0xffffff9c, &(0x7f00000007c0), 0x403, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000700)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000580)={'filter\x00', 0x0, 0x3, 0x3c, [0x7, 0xab, 0xfa26, 0x101, 0xf, 0x7], 0x5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], &(0x7f0000000100)=""/60}, &(0x7f0000000280)=0x78) 5.553884891s ago: executing program 0 (id=1564): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000540), 0x0) 5.553217796s ago: executing program 1 (id=1565): memfd_create(0x0, 0x71d1b0e49e132b29) unshare(0x20400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r3 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7ff}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000063119a00000000008510000002000000850000020000000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000850000009d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000040)={0x0, 0x4, 0x5}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'nicvf0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32=0x1, @ANYBLOB="01800000000000000000000000000000ccc421bf0e656f00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000400"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="77ee25ca00000000002e00000000040095000000002a0000"], &(0x7f0000000300)='GPL\x00', 0xe, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'virt_wifi0\x00', 0x1000}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'virt_wifi0\x00', 0x400}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0xa00802, &(0x7f0000000100), 0x5, 0x769, &(0x7f0000002040)="$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") 4.753358927s ago: executing program 0 (id=1566): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) 4.601650635s ago: executing program 0 (id=1567): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fbdbdf2504"], 0x84}, 0x1, 0x0, 0x0, 0x8040}, 0x800) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 3.991900176s ago: executing program 3 (id=1568): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0xc3, &(0x7f0000000040), 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r1, 0x0, 0x0}) io_uring_enter(r1, 0x54, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 3.749561383s ago: executing program 1 (id=1569): r0 = socket$packet(0x11, 0x2, 0x300) open(0x0, 0x147842, 0x0) mq_open(&(0x7f0000000000)='\xbd([-+\x00', 0x63, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @remote, 0xfffffffd, 0x4}, 0x20) connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4d) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @broadcast}, 0x10) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg(r2, &(0x7f0000005d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004005) 3.31447281s ago: executing program 0 (id=1570): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000a00000005000400000000000900020073797a31000000000c"], 0x58}}, 0x0) 3.15154161s ago: executing program 1 (id=1571): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x132c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0x5}}, @TCA_CHAIN={0x8, 0xb, 0x60}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_route={{0xa}, {0x12dc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x6f}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x31}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_ACT={0x12b8, 0x6, [@m_sample={0x3c, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0xd, 0x6, "e382c42ebd85b3baf2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x120, 0x10, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1ff}]}, {0xe1, 0x6, "57eb9c56054fd807513303b3f4cf2159c55e35510c777ffa2014e7e694230809b9eb1ed7f293245aebba45a1ea878c207ab5b8ff73b3b3448048e6cac141f39cbeee17794690ddf0bca2ac2a249d9e877c1123d0f06c27f3ebee9569460b9f4d9f5b7b06cfe2883ba47b6dc50a2c7a24c96c854e7df0374432374ea02f1a278cd2549b201fcd47c4e8405d197cf796492ae564779963f8e2dc1ac00bebdd180f84413cf421d0d08ee85dd48de73726ee74cb6f594aaa44c7645d154f3842abed854c484699dc036cf24205945eaf7b6d85c0842b496dc1943550dcf4ae"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x124, 0x2, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x101}, @TCA_CT_ZONE={0x6, 0x4, 0x6}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea4ceb0a2367847922314f8aa6c591ae"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "58f25e882ecebd3017a6274441c51594"}]}, {0x9d, 0x6, "f84ebe84c2d9809d98cb12f2274b5e21a4b137a60d915bfb42d02d4976ad358f638df8594bc932b13ff21d61be8614c3e0d017d21773d441648e714188ceca643a7f306544ce1be061d95d94f171717e049609b7d2b065d9b018db93c08d3479edf5f057f3b5d682c142a7be2a698456dbb28b7070774e11cf4125dc778036c189ec187ceb923d94a23e0d32f0cda5d880fc5a368aae1f7da8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0x1034, 0xe, 0x0, 0x0, {{0xa}, {0xf88, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xef8, 0x4, {{{0x10000, 0xfffffff8, 0x7, 0x7, 0x3}, 0xe8, 0x40, [{0x79, 0x2, 0xf40b67f0, 0xbf, 0x8, 0x95}, {0x7, 0x7fff, 0x32, 0x1, 0x5, 0x10}, {0x7, 0x0, 0x1, 0x7, 0x5, 0x85}, {0x4, 0x7, 0x2, 0xb, 0x7, 0x3}, {0x4, 0x5fdfb467, 0x101, 0x2, 0x1, 0x1}, {0x1, 0x80, 0x6a1, 0xc9ea, 0xfff, 0x7}, {0x7ff, 0x3, 0xfffffffe, 0x0, 0x5, 0x4}, {0xbf, 0x4, 0x3b9, 0x0, 0x10000, 0x4}, {0xa, 0x1a0, 0x7, 0x8, 0x7, 0x1}]}, [{0x1, 0x0, 0x7ff, 0x4, 0x7, 0x7}, {0x7, 0xd, 0xfff, 0x7, 0xbd, 0x4}, {0x8, 0x400, 0x4, 0x5, 0x2, 0x7ff}, {0x1, 0xffff, 0xf, 0x10000, 0x7f, 0x90000}, {0xffffff80, 0x270, 0x7fff, 0xfffffe00, 0x3}, {0x1, 0x400, 0x6, 0x1, 0x9, 0x9}, {0x0, 0x575, 0x29, 0xff, 0x7, 0x6}, {0x8, 0x5, 0xc, 0xa, 0x10001, 0xbbf4}, {0xffffffca, 0x3, 0x3, 0x7f000, 0x2, 0xffff}, {0xdfa, 0x7, 0x9, 0x5, 0x7, 0xfffffffc}, {0x4, 0x80, 0x5, 0x2, 0x9}, {0x5, 0xfffffffb, 0x2, 0x8, 0x4, 0x80000000}, {0xea06, 0x3, 0x9, 0xffffffff, 0x7}, {0x6, 0x7fffffff, 0x3, 0x3, 0x2, 0xf}, {0x8, 0x27c8000, 0x9, 0x6, 0x0, 0x327}, {0x2, 0x1, 0x80000001, 0x34, 0x7, 0x401}, {0x2, 0xf, 0x938, 0x9, 0xf, 0x7}, {0x9, 0x8, 0x2, 0x3, 0x9, 0x3}, {0x8, 0xc73, 0xb912, 0x140000, 0x1000, 0x80000000}, {0x2, 0x7, 0x2, 0x0, 0x223, 0x10001}, {0x5, 0x1, 0x7, 0x4, 0x3, 0xfffff1b9}, {0x0, 0xe18, 0x9, 0xc7f, 0x8, 0x7}, {0x2, 0x3, 0x3, 0x1, 0x3, 0xffff8000}, {0x0, 0x640, 0x8, 0x4, 0x9e, 0xfffffffb}, {0x4, 0x5, 0x1, 0x8, 0x1, 0x391}, {0x41e5, 0xffff, 0x6, 0xfffffffb, 0x1, 0x8}, {0x5, 0x0, 0xc00000, 0x1, 0x7, 0x62d70666}, {0x7, 0x88, 0x9, 0x3, 0x0, 0x4}, {0x2, 0x3, 0x800, 0x3ff, 0x9, 0x638}, {0x10, 0x2a25, 0x4, 0xe, 0x9, 0x7}, {0x6, 0xffc5, 0xc77e, 0x80000000, 0xfffff009, 0x2}, {0x6131, 0x9, 0x0, 0x7, 0xe, 0x1}, {0x86, 0x1, 0x5, 0x9, 0x2, 0xb91}, {0x7, 0x8, 0xbf, 0x101, 0x2, 0x4}, {0x9, 0x6, 0xce, 0x10001, 0x6, 0xd}, {0x2, 0xfff, 0x73, 0x7fffffff, 0x5841, 0x70c0}, {0x0, 0x8, 0x5, 0x5, 0x8, 0x3}, {0x8, 0x81, 0x6, 0x4, 0xffffffff, 0xd}, {0x4, 0x1, 0x10001, 0xd0e, 0x2a, 0x43}, {0x1, 0x1, 0x3, 0x1d7e, 0x3, 0x9}, {0x0, 0x8000, 0x9, 0x3, 0x8, 0x5}, {0x0, 0x10000, 0x5, 0x8, 0x9, 0x400}, {0xff, 0x9, 0xc, 0xc104, 0x8, 0x1}, {0xef0, 0x4, 0x100, 0x7, 0x7fff, 0x4}, {0x400, 0x9, 0x9, 0x3ff, 0x1, 0x200}, {0x10001, 0x3, 0x9, 0xaf8e, 0xe, 0x3ff}, {0x8, 0x3, 0xb38, 0x6, 0x0, 0x3640a411}, {0x1, 0x8, 0xffff, 0x3, 0x1, 0x2}, {0x9, 0x1, 0xf1, 0x0, 0xfffffff8, 0x9e5e}, {0x2, 0x0, 0xa4ea, 0xff, 0x6b, 0x763}, {0x0, 0xffff, 0xa6e, 0x7, 0x9e3, 0xc}, {0x5, 0x2, 0x9, 0x800, 0x2, 0x80}, {0x6, 0x9, 0x0, 0x101, 0x53, 0x3cc6}, {0x0, 0xd2ec, 0xaf0c, 0xe, 0x400, 0x2}, {0x8, 0x7, 0x60000, 0x2, 0x0, 0x1}, {0x0, 0x7, 0x2, 0xb, 0x3, 0x2000}, {0x3, 0x8, 0x61, 0x9, 0x8, 0x4}, {0x401, 0x9, 0x5, 0x3, 0x3, 0xc}, {0xf, 0x1, 0xa749, 0x8, 0x5, 0x3}, {0x7fffffff, 0x2, 0x5, 0x7, 0x5, 0x80}, {0x8, 0x8, 0xbfb0, 0xa983, 0x2, 0x8}, {0x8, 0x8, 0x2, 0x7, 0xf, 0x1}, {0x3, 0x80000000, 0x7, 0x3, 0x7fffffff, 0x800}, {0x7f, 0x3, 0x1a, 0x4, 0x2, 0x1}, {0x7, 0x3ff, 0x401, 0x7fff, 0x10001, 0x9}, {0x5, 0x6, 0x6, 0x2, 0xe3, 0xfffffff8}, {0xcb62, 0x2, 0x2, 0x3, 0xffffff01, 0x1}, {0x0, 0x8, 0x8, 0xbe88, 0x1e6, 0x9}, {0x8, 0x5, 0x0, 0x0, 0x3, 0xa1}, {0x40, 0x8, 0x1dd, 0x6, 0x81, 0x1}, {0xf2f2, 0x9, 0xfffffff3, 0x5, 0x3, 0xa796}, {0xb, 0x6, 0x1ff, 0x9, 0xc, 0x7ff}, {0x8000, 0x8f3, 0x7fffffff, 0xb94, 0x80000001, 0x46}, {0x3, 0x401, 0x3, 0xe3, 0x9, 0xc0000000}, {0x9, 0x100, 0x2, 0xfff, 0x9, 0x2000000}, {0xc0000000, 0x7, 0x7, 0x8, 0x0, 0x10001}, {0x1, 0x8000000, 0x4, 0x400, 0x80000000, 0x1}, {0x89da, 0x6, 0x400, 0x8001, 0x2, 0x40}, {0x72f2, 0x2, 0x3, 0x1000, 0xeb, 0x69}, {0x1, 0x5, 0xe0e7, 0x401, 0x9, 0x190c}, {0x6, 0x9f99, 0x8000, 0x3, 0xb57, 0x26}, {0x4, 0x0, 0x9, 0x9, 0xfff, 0x10}, {0x3, 0x6, 0x401, 0x6, 0x7ff, 0x5}, {0x7, 0x81, 0xfff, 0xff, 0x4, 0xc8}, {0x9, 0xf782, 0x1, 0x5, 0x7, 0x8}, {0x1, 0x80, 0x5, 0x0, 0x3, 0x3}, {0x10, 0x4, 0x9, 0x9, 0x8, 0x8}, {0x8001, 0x1ff, 0x2, 0x0, 0x4, 0xfffffeff}, {0x5, 0x5, 0xef40, 0x0, 0xa, 0x101}, {0x4, 0xf, 0x3, 0xe4700, 0x401, 0x4}, {0x3, 0x7, 0xece, 0x6, 0xfffffff8, 0x1}, {0x6d, 0x0, 0xfffffff9, 0xb, 0x8, 0x2}, {0x1, 0x3, 0x7, 0x1, 0xe0000}, {0x0, 0xc315, 0x44b, 0xffffffff, 0x9, 0x1}, {0x6, 0x7fffffff, 0x5ed, 0xff, 0x800, 0x5}, {0xa87d, 0x10001, 0x40, 0x4, 0x7, 0x9c3}, {0x9, 0x0, 0x12, 0x7ff, 0x1, 0xd7ae}, {0xff, 0x3d, 0x7fff, 0x0, 0x2, 0x9}, {0x0, 0x7ff, 0xbb69, 0x3, 0x4}, {0x9, 0x6, 0x4, 0x8, 0xe5ab, 0x6}, {0x400, 0x7ff, 0x7fffffff, 0x5143, 0x3, 0xffff}, {0x10, 0x9, 0x9, 0x4, 0x5, 0xffffffff}, {0x0, 0x9, 0x2, 0x6, 0x9, 0x7fff}, {0x7fffffff, 0x4, 0x6, 0x7fffffff, 0x10, 0x80000000}, {0x4, 0xffffff9b, 0x5, 0x0, 0x7, 0x6f6c}, {0x1, 0x3ff, 0x7, 0x269d, 0x8, 0x4}, {0x1, 0x1, 0x5, 0x5be0, 0x2, 0x9}, {0x10, 0x8, 0x8, 0xfffffffa, 0x6, 0x8816}, {0x7, 0x2f6, 0x810, 0x8, 0x9, 0xf26c}, {0x7, 0x1ff, 0x1, 0xa, 0x6f, 0x7}, {0x80000000, 0x7fff, 0x6, 0xfffffff7, 0x7, 0x73c12b2}, {0x4, 0x0, 0x7fff, 0x80, 0x7ff, 0x6}, {0x7f, 0x80eb, 0xd6800000, 0x3ff, 0x4, 0xfff}, {0x100, 0xb, 0x5, 0xd4, 0x8, 0x99}, {0xc7f, 0x0, 0x7, 0x7, 0x101, 0xe0e}, {0x10000, 0x5, 0x6, 0x6, 0x6339, 0x83}, {0xfeb, 0x4, 0x1800f507, 0xb519, 0x8, 0xa}, {0xfffffff3, 0x9, 0x5, 0x9, 0x10001, 0x2}, {0x5, 0x200, 0xa4, 0x7, 0x2, 0x9}, {0x7, 0x3, 0x0, 0x8001, 0x7fffffff, 0x2}, {0x2, 0xe, 0x6, 0x0, 0xfff, 0x9}, {0x7, 0x2, 0x1, 0x1, 0x2, 0x5}, {0x5, 0x1, 0x10001, 0x1, 0x2, 0xaed}, {0x8, 0x5, 0x40, 0x8fe2, 0x5, 0x5}, {0x0, 0x0, 0x10001, 0xfffffffd, 0x7, 0xc8c}, {0xc, 0xa7, 0xffff, 0x1, 0x0, 0xffff}, {0x7, 0xfec134c, 0xa, 0x3, 0x9, 0x2}, {0x10000, 0x6, 0x2, 0x9, 0x8d4c, 0x7}], [{0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x6}, {0x95a9275e3b3c82b7, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2}, {0x12b0e635d954e5a5, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x4}, {}, {0x5, 0x1}, {0x2}, {0x3}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x2}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x5}, {0x1}, {0x1, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x4}, {0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3fab902e33aa2694, 0x1}, {0x4}, {0x3}, {0x4}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3}, {}, {0x2}, {0x3}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x4}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5863964737e4cd0e, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x8c, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x81, 0x6, "270b4df43265f7e3df51fc3437115a1d004056ad9120e5e5d07f74a557e7105350694ac58e0256c7064f934d003b1f688bd8b74c3db3228b3618e406168a4011a687412af1df697acf4304ad43d73c1bef5a7b8fc861c7970ba9602e6f5b6816ba820f5da09c0e0aa57660df225c64d824b739dfe5ebbccaf586e98633"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x7}}}}]}, @TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x132c}, 0x1, 0x0, 0x0, 0x4004014}, 0x40004) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.893258871s ago: executing program 3 (id=1572): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, &(0x7f0000000000)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2511060000003d000000"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.730247928s ago: executing program 0 (id=1573): socket$key(0xf, 0x3, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r0 = epoll_create(0x6) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x0, 0x2, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x80000000, 0x2, 0x1}) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x200, 0x1, 0x4, 0x4008, 0x8, {0x77359400}, {0x5, 0x2, 0xf7, 0x8, 0x2, 0xb, "1b38a75a"}, 0x0, 0x3, {&(0x7f0000000080)=[{0x6d7, 0x1, {0x1ff}, 0x3000000}, {0x87, 0x3, {0x7}, 0x68b}]}, 0x8, 0x0, r2}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002180)='/sys/power/sync_on_suspend', 0xa82, 0x0) sendfile(r3, r3, 0x0, 0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000240)={0xc, 0x1, 0x1, "f7f763826d664520fee8ad78a7bbb166e1d70460bcbddb00", 0x30314742}) syz_open_dev$video(&(0x7f0000000580), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) r4 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000300)) 2.265093562s ago: executing program 3 (id=1574): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000540), 0x0) 1.99391343s ago: executing program 1 (id=1575): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) connect$802154_dgram(r1, 0x0, 0x0) 1.615260556s ago: executing program 3 (id=1576): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600000000000000008500000007000000c5000000a0000200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 1.575697656s ago: executing program 1 (id=1577): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000400"/18, @ANYRES32], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x20008001}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 909.170286ms ago: executing program 0 (id=1578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@acl}, {@nointr}, {@atime_quantum={'atime_quantum', 0x3d, 0x7}}, {@localflocks}, {@localalloc={'localalloc', 0x3d, 0x3}}, {@localflocks}, {@intr}, {@heartbeat_none}]}, 0x1, 0x4430, &(0x7f0000000240)="$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") openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) dup(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) mmap(&(0x7f00003a8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_mount_image$msdos(&(0x7f0000000440), &(0x7f0000000100)='.\x00', 0x22, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@acl}, {@nointr}, {@atime_quantum={'atime_quantum', 0x3d, 0x7}}, {@localflocks}, {@localalloc={'localalloc', 0x3d, 0x3}}, {@localflocks}, {@intr}, {@heartbeat_none}]}, 0x1, 0x4430, &(0x7f0000000240)="$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") (async) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) (async) dup(0xffffffffffffffff) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) (async) mmap(&(0x7f00003a8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) syz_mount_image$msdos(&(0x7f0000000440), &(0x7f0000000100)='.\x00', 0x22, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) (async) 721.844156ms ago: executing program 3 (id=1579): r0 = socket$packet(0x11, 0x2, 0x300) open(0x0, 0x147842, 0x0) mq_open(&(0x7f0000000000)='\xbd([-+\x00', 0x63, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @remote, 0xfffffffd, 0x4}, 0x20) connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4d) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @broadcast}, 0x10) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg(r2, &(0x7f0000005d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004005) 0s ago: executing program 3 (id=1580): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0), 0x8, 0x0) r1 = io_uring_setup(0x303e, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x202}) dup2(r0, r1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) accept(r2, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (fail_nth: 2) kernel console output (not intermixed with test programs): [ 911.127810][T11080] R10: 0000000000000ffc R11: 0000000000000246 R12: 0000000000000001 [ 911.136018][T11080] R13: 0000000000000000 R14: 00007f29a7f35f80 R15: 00007ffcda026a68 [ 911.144144][T11080] [ 911.623006][T11023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.630175][T11023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.658569][T11023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.275252][T11023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.282889][T11023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.309432][T11023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.402641][ T5199] Bluetooth: hci3: command tx timeout [ 913.152590][T11093] loop0: detected capacity change from 0 to 2048 [ 913.237352][T11093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 913.285759][T11023] hsr_slave_0: entered promiscuous mode [ 913.384115][T11023] hsr_slave_1: entered promiscuous mode [ 913.456009][T11023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 913.464029][T11023] Cannot create hsr debugfs directory [ 913.670325][ T29] audit: type=1326 audit(1727667907.731:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.0.1315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29a7d7dff9 code=0x0 [ 914.249592][T10590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.247625][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 915.362182][T10992] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 915.468762][T11023] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.484332][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 915.551487][T10992] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 915.566946][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 915.575684][ T10] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 915.586594][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 915.596961][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 915.607460][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 915.620998][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 915.631033][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.737944][T11023] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.779155][ T10] usbtmc 5-1:16.0: bulk endpoints not found [ 915.904560][T10992] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 916.025155][T10992] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 916.036980][ T29] audit: type=1326 audit(1727667910.101:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11118 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a7d7dff9 code=0x7ffc0000 [ 916.065399][ T29] audit: type=1326 audit(1727667910.101:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11118 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a7d7dff9 code=0x7ffc0000 [ 916.087364][T11119] loop0: detected capacity change from 0 to 512 [ 916.089667][ T29] audit: type=1326 audit(1727667910.101:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11118 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29a7d7dff9 code=0x7ffc0000 [ 916.117425][ T29] audit: type=1326 audit(1727667910.101:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11118 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a7d7dff9 code=0x7ffc0000 [ 916.140408][ T29] audit: type=1326 audit(1727667910.111:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11118 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29a7d7dff9 code=0x7ffc0000 [ 916.168797][ T29] audit: type=1326 audit(1727667910.121:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11118 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a7d7dff9 code=0x7ffc0000 [ 916.193317][ T29] audit: type=1326 audit(1727667910.121:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11118 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29a7d7dff9 code=0x7ffc0000 [ 916.216381][ T29] audit: type=1326 audit(1727667910.141:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11118 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a7d7dff9 code=0x7ffc0000 [ 916.239365][ T29] audit: type=1326 audit(1727667910.151:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11118 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a7d7dff9 code=0x7ffc0000 [ 916.478230][T11023] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.599032][T11119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 916.612388][T11119] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 916.708074][T11023] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.273456][T10696] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 917.397467][T10992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.498127][T10696] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 917.510340][T10696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 917.521738][T10696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 917.532115][T10696] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 917.545672][T10696] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 917.555121][T10696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.580295][T11023] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 917.620152][T11023] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 917.728781][T10992] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.740943][T11023] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 917.782304][T10696] usb 3-1: config 0 descriptor?? [ 917.900140][T10719] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.908540][T10719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.026472][T11023] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 918.248779][T10719] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.256911][T10719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.628069][ T5250] usb 5-1: USB disconnect, device number 28 [ 918.657317][T10696] usbhid 3-1:0.0: can't add hid device: -71 [ 918.664241][T10696] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 918.766825][T10590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.827986][T11144] FAULT_INJECTION: forcing a failure. [ 918.827986][T11144] name failslab, interval 1, probability 0, space 0, times 0 [ 918.841102][T11144] CPU: 1 UID: 0 PID: 11144 Comm: syz.4.1326 Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 918.851835][T11144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 918.862121][T11144] Call Trace: [ 918.865595][T11144] [ 918.868712][T11144] dump_stack_lvl+0x216/0x2d0 [ 918.873713][T11144] dump_stack+0x1e/0x30 [ 918.878164][T11144] should_fail_ex+0x748/0x7f0 [ 918.883164][T11144] should_failslab+0x17f/0x210 [ 918.888206][T11144] __kmalloc_noprof+0x175/0xf30 [ 918.893369][T11144] ? tomoyo_realpath_from_path+0x104/0xaa0 [ 918.899476][T11144] ? kmsan_get_metadata+0x13e/0x1c0 [ 918.904961][T11144] tomoyo_realpath_from_path+0x104/0xaa0 [ 918.910900][T11144] ? __srcu_read_lock+0x76/0xd0 [ 918.916059][T11144] tomoyo_path_number_perm+0x1d9/0x8f0 [ 918.921856][T11144] ? kmsan_get_metadata+0x13e/0x1c0 [ 918.927336][T11144] ? kmsan_get_metadata+0x13e/0x1c0 [ 918.932805][T11144] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 918.938929][T11144] tomoyo_file_ioctl+0x3f/0x50 [ 918.943979][T11144] security_file_ioctl+0x145/0x590 [ 918.949400][T11144] __se_sys_ioctl+0xd3/0x450 [ 918.954283][T11144] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 918.960363][T11144] __x64_sys_ioctl+0x96/0xe0 [ 918.965244][T11144] x64_sys_call+0x18bf/0x3ba0 [ 918.970208][T11144] do_syscall_64+0xcd/0x1e0 [ 918.974992][T11144] ? clear_bhb_loop+0x25/0x80 [ 918.979921][T11144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.986121][T11144] RIP: 0033:0x7f3a3077dff9 [ 918.990784][T11144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.010670][T11144] RSP: 002b:00007f3a3160f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 919.019376][T11144] RAX: ffffffffffffffda RBX: 00007f3a30935f80 RCX: 00007f3a3077dff9 [ 919.027582][T11144] RDX: 00000000200019c0 RSI: 000000008004745a RDI: 0000000000000004 [ 919.035784][T11144] RBP: 00007f3a3160f090 R08: 0000000000000000 R09: 0000000000000000 [ 919.043977][T11144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.052164][T11144] R13: 0000000000000000 R14: 00007f3a30935f80 R15: 00007ffd61f3eae8 [ 919.060383][T11144] [ 919.069775][T11144] ERROR: Out of memory at tomoyo_realpath_from_path. [ 919.102752][T10696] usb 3-1: USB disconnect, device number 18 [ 919.502802][T11023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.555399][T11023] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.600049][ T9283] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.607845][ T9283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.975555][ T9283] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.983330][ T9283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.281510][T11023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 920.536370][T10992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.002104][T10992] veth0_vlan: entered promiscuous mode [ 921.038340][T10992] veth1_vlan: entered promiscuous mode [ 921.125448][T11152] loop2: detected capacity change from 0 to 2048 [ 921.515813][T11152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.651367][T10992] veth0_macvtap: entered promiscuous mode [ 921.696812][T10992] veth1_macvtap: entered promiscuous mode [ 921.808416][T10992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 921.819289][T10992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.829522][T10992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 921.840320][T10992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.851198][T10992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 921.864272][T10992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.874876][T10992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 921.885667][T10992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.902436][T10992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 921.915279][T10992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.925391][T10992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 921.938033][T10992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.953894][T10992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.020707][T10992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.031639][T10992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.042500][T10992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.053395][T10992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.063591][T10992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.074458][T10992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.084609][T10992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.091799][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 922.091870][ T29] audit: type=1326 audit(1727667916.121:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.2.1327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ef197dff9 code=0x0 [ 922.103487][T10992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.138627][T10992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.149432][T10992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.159582][T10992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.173848][T10992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.191636][T10992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.452537][T11023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.581811][T10992] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.591197][T10992] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.603171][T10992] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.619265][T10992] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.814142][T10596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.143687][T11023] veth0_vlan: entered promiscuous mode [ 923.188029][T11023] veth1_vlan: entered promiscuous mode [ 923.373356][T11023] veth0_macvtap: entered promiscuous mode [ 923.476930][T11023] veth1_macvtap: entered promiscuous mode [ 923.742684][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.753526][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.763729][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.774505][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.786052][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.799742][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.812798][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.823767][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.841428][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.854288][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.864400][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.875222][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.885345][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.896111][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.911684][T11023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 924.113081][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.125557][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.135832][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.153218][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.165401][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.179656][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.190660][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.201430][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.211585][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.222863][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.232988][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.250285][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.263119][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.274400][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.289649][T11023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 924.486544][T11183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 924.568504][T11023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.578276][T11023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.588670][T11023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.598127][T11023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.624251][ T5250] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 925.805322][ T5250] usb 1-1: Using ep0 maxpacket: 8 [ 925.836302][ T5250] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 925.845113][ T5250] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 925.856177][ T5250] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 925.866505][ T5250] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 925.876496][ T5250] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 925.891449][ T5250] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 925.901282][ T5250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.933468][ T5246] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 926.168211][ T5246] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 926.180497][ T5246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 926.195001][ T5246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 926.205988][ T5246] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 926.219872][ T5246] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 926.229826][ T5246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.296717][ T5250] usbtmc 1-1:16.0: bulk endpoints not found [ 926.536769][ T5246] usb 3-1: config 0 descriptor?? [ 927.722454][ T5246] usbhid 3-1:0.0: can't add hid device: -71 [ 927.732544][ T5246] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 927.852592][ T5246] usb 3-1: USB disconnect, device number 19 [ 928.473403][ T5246] usb 1-1: USB disconnect, device number 27 [ 929.403657][T11240] loop2: detected capacity change from 0 to 2048 [ 929.667757][T11248] FAULT_INJECTION: forcing a failure. [ 929.667757][T11248] name failslab, interval 1, probability 0, space 0, times 0 [ 929.687540][T11248] CPU: 1 UID: 0 PID: 11248 Comm: syz.4.1343 Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 929.698366][T11248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 929.708673][T11248] Call Trace: [ 929.712141][T11248] [ 929.715263][T11248] dump_stack_lvl+0x216/0x2d0 [ 929.720275][T11248] dump_stack+0x1e/0x30 [ 929.724734][T11248] should_fail_ex+0x748/0x7f0 [ 929.729900][T11248] should_failslab+0x17f/0x210 [ 929.734953][T11248] kmem_cache_alloc_noprof+0xe2/0xb20 [ 929.740641][T11248] ? skb_clone+0x303/0x550 [ 929.745366][T11248] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 929.751503][T11248] skb_clone+0x303/0x550 [ 929.756048][T11248] __netlink_deliver_tap+0x607/0xc90 [ 929.761656][T11248] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 929.767753][T11248] ? kmsan_get_metadata+0x13e/0x1c0 [ 929.773235][T11248] netlink_sendskb+0x23f/0x270 [ 929.778290][T11248] netlink_unicast+0x70c/0x1260 [ 929.783454][T11248] netlink_ack+0xb04/0xe80 [ 929.788182][T11248] netlink_rcv_skb+0x510/0x650 [ 929.793346][T11248] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 929.799112][T11248] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 929.804871][T11248] rtnetlink_rcv+0x34/0x40 [ 929.809581][T11248] netlink_unicast+0xf52/0x1260 [ 929.814750][T11248] netlink_sendmsg+0x10da/0x11e0 [ 929.820014][T11248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 929.825644][T11248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 929.831284][T11248] __sock_sendmsg+0x30f/0x380 [ 929.836379][T11248] ____sys_sendmsg+0x877/0xb60 [ 929.841460][T11248] ___sys_sendmsg+0x28d/0x3c0 [ 929.846439][T11248] ? kmsan_get_metadata+0x13e/0x1c0 [ 929.851923][T11248] ? __rcu_read_unlock+0x7b/0xe0 [ 929.857146][T11248] ? __fget_files+0x4f5/0x5c0 [ 929.862137][T11248] ? kmsan_get_metadata+0x13e/0x1c0 [ 929.867603][T11248] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 929.873685][T11248] __x64_sys_sendmsg+0x300/0x4a0 [ 929.878926][T11248] ? perf_mmap+0x14e0/0x28d0 [ 929.883825][T11248] x64_sys_call+0x2da0/0x3ba0 [ 929.888816][T11248] do_syscall_64+0xcd/0x1e0 [ 929.893623][T11248] ? clear_bhb_loop+0x25/0x80 [ 929.898584][T11248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.904830][T11248] RIP: 0033:0x7f3a3077dff9 [ 929.909492][T11248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 929.929398][T11248] RSP: 002b:00007f3a3160f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.938136][T11248] RAX: ffffffffffffffda RBX: 00007f3a30935f80 RCX: 00007f3a3077dff9 [ 929.946371][T11248] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 929.954587][T11248] RBP: 00007f3a3160f090 R08: 0000000000000000 R09: 0000000000000000 [ 929.962803][T11248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.970990][T11248] R13: 0000000000000000 R14: 00007f3a30935f80 R15: 00007ffd61f3eae8 [ 929.979219][T11248] [ 930.563193][T11240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 930.656762][ T29] audit: type=1326 audit(1727667924.741:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.2.1340" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ef197dff9 code=0x0 [ 930.774540][T11259] netlink: 'syz.0.1344': attribute type 1 has an invalid length. [ 930.782643][T11259] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1344'. [ 930.792177][T11259] tipc: Enabling of bearer rejected, failed to enable media [ 930.989279][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.997394][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.085953][T10596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.145443][T11264] loop4: detected capacity change from 0 to 512 [ 931.155285][T11264] EXT4-fs: Ignoring removed oldalloc option [ 931.166801][T11264] EXT4-fs (loop4): unsupported inode size: 160 [ 931.173598][T11264] EXT4-fs (loop4): blocksize: 1024 [ 931.247668][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.256353][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.503800][T11259] fuse: Unknown parameter '0xffffffffffffffff' [ 932.006996][T10719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.026442][T10719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.214250][ T3816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.223010][ T3816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.974146][T11278] netlink: 'syz.1.1298': attribute type 11 has an invalid length. [ 932.982668][T11278] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.1298'. [ 933.233953][ T5246] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 933.488396][ T5246] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 933.500586][ T5246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 933.512051][ T5246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 933.522244][ T5246] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 933.535691][ T5246] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 933.545210][ T5246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.953716][ T5246] usb 3-1: config 0 descriptor?? [ 934.673258][ T5250] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 934.725679][ T5246] usbhid 3-1:0.0: can't add hid device: -71 [ 934.732634][ T5246] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 934.931918][ T5246] usb 3-1: USB disconnect, device number 20 [ 934.945462][ T5250] usb 5-1: Using ep0 maxpacket: 8 [ 934.994231][ T5250] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 935.006782][ T5250] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 935.019065][ T5250] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 935.022231][T11276] loop3: detected capacity change from 0 to 32768 [ 935.029146][ T5250] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 935.045758][ T5250] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 935.059267][ T5250] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 935.068891][ T5250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.156939][T11276] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 935.440817][ T5250] usbtmc 5-1:16.0: bulk endpoints not found [ 935.501342][T10992] ocfs2: Unmounting device (7,3) on (node local) [ 937.179443][T11294] loop2: detected capacity change from 0 to 2048 [ 937.412819][T11294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 937.474154][T11301] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 937.668807][ T10] usb 5-1: USB disconnect, device number 29 [ 937.881335][ T5250] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 937.978324][ T29] audit: type=1326 audit(1727667932.041:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11291 comm="syz.2.1354" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ef197dff9 code=0x0 [ 938.042530][ T5250] usb 4-1: Using ep0 maxpacket: 8 [ 938.250785][ T5250] usb 4-1: unable to get BOS descriptor or descriptor too short [ 938.317400][ T5250] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 938.327986][ T5250] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 938.339044][ T5250] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 938.457553][ T5250] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 938.467373][ T5250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.477911][ T5250] usb 4-1: Product: syz [ 938.488369][ T5250] usb 4-1: Manufacturer: syz [ 938.495085][ T5250] usb 4-1: SerialNumber: syz [ 938.548050][ T5250] usb 4-1: config 0 descriptor?? [ 938.633356][ T5250] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 938.753982][T10596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.924685][T11313] netlink: 'syz.0.1360': attribute type 11 has an invalid length. [ 938.933342][T11313] netlink: 134820 bytes leftover after parsing attributes in process `syz.0.1360'. [ 938.986343][ T5250] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 939.127336][ T5250] usb 4-1: USB disconnect, device number 33 [ 939.362998][T10876] udevd[10876]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 939.942495][ T5250] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 939.969935][ T5252] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 940.149407][ T5250] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 940.161621][ T5250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 940.173076][ T5250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 940.183280][ T5250] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 940.196635][ T5250] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 940.206591][ T5250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.227020][ T5252] usb 3-1: Using ep0 maxpacket: 16 [ 940.241578][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1365'. [ 940.289525][ T5252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.293297][ T5250] usb 5-1: config 0 descriptor?? [ 940.301694][ T5252] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 940.319721][ T5252] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 940.334457][ T5252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.764166][T11326] FAULT_INJECTION: forcing a failure. [ 940.764166][T11326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.777868][T11326] CPU: 1 UID: 0 PID: 11326 Comm: syz.0.1366 Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 940.788602][T11326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 940.798995][T11326] Call Trace: [ 940.802475][T11326] [ 940.805621][T11326] dump_stack_lvl+0x216/0x2d0 [ 940.810708][T11326] dump_stack+0x1e/0x30 [ 940.815168][T11326] should_fail_ex+0x748/0x7f0 [ 940.820177][T11326] should_fail+0x2a/0x40 [ 940.824730][T11326] should_fail_usercopy+0x2e/0x40 [ 940.830067][T11326] _copy_from_user+0x33/0x160 [ 940.835051][T11326] __copy_msghdr+0x5e9/0x7c0 [ 940.839945][T11326] ___sys_sendmsg+0x1e6/0x3c0 [ 940.844917][T11326] ? kmsan_get_metadata+0x13e/0x1c0 [ 940.850392][T11326] ? __rcu_read_unlock+0x7b/0xe0 [ 940.855615][T11326] ? __fget_files+0x4f5/0x5c0 [ 940.860591][T11326] ? kmsan_get_metadata+0x13e/0x1c0 [ 940.866048][T11326] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 940.872126][T11326] __x64_sys_sendmsg+0x300/0x4a0 [ 940.877348][T11326] ? ksys_write+0x416/0x4c0 [ 940.882156][T11326] x64_sys_call+0x2da0/0x3ba0 [ 940.887126][T11326] do_syscall_64+0xcd/0x1e0 [ 940.891904][T11326] ? clear_bhb_loop+0x25/0x80 [ 940.896839][T11326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.903050][T11326] RIP: 0033:0x7f29a7d7dff9 [ 940.907700][T11326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.927673][T11326] RSP: 002b:00007f29a8bb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.936390][T11326] RAX: ffffffffffffffda RBX: 00007f29a7f35f80 RCX: 00007f29a7d7dff9 [ 940.944705][T11326] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000007 [ 940.952916][T11326] RBP: 00007f29a8bb0090 R08: 0000000000000000 R09: 0000000000000000 [ 940.961113][T11326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.969398][T11326] R13: 0000000000000000 R14: 00007f29a7f35f80 R15: 00007ffcda026a68 [ 940.977637][T11326] [ 941.069401][ T5250] usbhid 5-1:0.0: can't add hid device: -71 [ 941.074893][ T5252] usb 3-1: config 0 descriptor?? [ 941.077050][ T5250] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 941.108857][ T5250] usb 5-1: USB disconnect, device number 30 [ 941.201392][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 941.430751][T11326] loop0: detected capacity change from 0 to 2048 [ 941.443187][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 941.504409][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 941.513227][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 941.523469][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 941.533648][ T10] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 941.544824][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 941.564651][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 941.575831][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.771752][ T10] usbtmc 4-1:16.0: bulk endpoints not found [ 941.837033][T11329] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 941.850077][T11329] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 941.867850][T11329] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 941.892846][T11315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.933923][T11329] Remounting filesystem read-only [ 942.026661][T11315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.400550][ T5252] usbhid 3-1:0.0: can't add hid device: -71 [ 942.407341][ T5252] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 942.499530][ T5252] usb 3-1: USB disconnect, device number 21 [ 943.434260][T11349] netlink: 'syz.2.1373': attribute type 11 has an invalid length. [ 943.442540][T11349] netlink: 134820 bytes leftover after parsing attributes in process `syz.2.1373'. [ 944.071562][T11347] loop4: detected capacity change from 0 to 2048 [ 944.171572][ T5252] usb 4-1: USB disconnect, device number 34 [ 944.480917][T11354] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 944.526863][T11347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.582421][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 944.683766][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1375'. [ 944.721789][ T2822] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 944.769844][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 944.779713][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.838091][T11363] loop3: detected capacity change from 0 to 16 [ 944.875043][ T10] usb 1-1: config 0 descriptor?? [ 944.927179][ T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 944.944750][ T2822] usb 2-1: Using ep0 maxpacket: 16 [ 944.980520][ T29] audit: type=1326 audit(1727667939.061:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.4.1371" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a3077dff9 code=0x0 [ 945.041331][ T10] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 945.061238][ T2822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.074044][ T2822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.084451][ T2822] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 945.099765][ T2822] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 945.109653][ T2822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.154138][T11355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1376'. [ 945.163744][T11355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1376'. [ 945.269826][ T2822] usb 2-1: config 0 descriptor?? [ 945.281201][ T5246] usb 1-1: USB disconnect, device number 28 [ 945.289156][ T5246] ftdi_sio 1-1:0.0: device disconnected [ 945.831035][T10606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.272208][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 946.286315][ T2822] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 946.371079][ T2822] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 946.386900][ T2822] microsoft 0003:045E:07DA.0005: no inputs found [ 946.398062][ T2822] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 946.644852][T11372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.645495][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 946.665436][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 946.681123][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 946.693130][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 946.706510][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 946.716041][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.817301][T11372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.849133][ T2822] usb 2-1: USB disconnect, device number 27 [ 947.041519][ T10] usb 4-1: config 0 descriptor?? [ 947.210233][T11382] loop2: detected capacity change from 0 to 128 [ 947.341791][T11382] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 947.458786][T11382] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 947.572664][T11382] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.1384: No space for directory leaf checksum. Please run e2fsck -D. [ 947.588676][T11382] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.1384: Directory block failed checksum [ 947.680347][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 947.687140][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 947.794511][ T10] usb 4-1: USB disconnect, device number 35 [ 947.828356][T10596] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 948.277035][T11388] netlink: 'syz.2.1385': attribute type 11 has an invalid length. [ 948.286272][T11388] netlink: 134820 bytes leftover after parsing attributes in process `syz.2.1385'. [ 948.703105][ T1240] bridge_slave_1: left allmulticast mode [ 948.711305][ T1240] bridge_slave_1: left promiscuous mode [ 948.725740][ T1240] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.805755][ T1240] bridge_slave_0: left allmulticast mode [ 948.811928][ T1240] bridge_slave_0: left promiscuous mode [ 948.829878][ T1240] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.571253][T11402] loop2: detected capacity change from 0 to 2048 [ 949.647770][ T1240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 949.718328][ T1240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.754742][ T1240] bond0 (unregistering): Released all slaves [ 949.778616][ T1240] bond1 (unregistering): Released all slaves [ 949.789015][T11402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.365364][ T29] audit: type=1326 audit(1727667944.321:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11399 comm="syz.2.1391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ef197dff9 code=0x0 [ 950.558980][T10596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.836299][T11420] xt_connbytes: Forcing CT accounting to be enabled [ 951.128381][ T1240] hsr_slave_0: left promiscuous mode [ 951.154749][ T1240] hsr_slave_1: left promiscuous mode [ 951.173653][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 951.189399][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 951.364525][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 951.372623][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.511327][ T1240] veth1_macvtap: left promiscuous mode [ 951.517830][ T1240] veth0_macvtap: left promiscuous mode [ 951.524099][ T1240] veth1_vlan: left promiscuous mode [ 951.529668][ T1240] veth0_vlan: left promiscuous mode [ 951.554776][ T5246] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 951.575442][T11428] netlink: 'syz.0.1400': attribute type 11 has an invalid length. [ 951.583770][T11428] netlink: 134820 bytes leftover after parsing attributes in process `syz.0.1400'. [ 952.133253][ T5246] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 952.145355][ T5246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 952.162466][ T5246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 952.174241][ T5246] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 952.187939][ T5246] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 952.197504][ T5246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.255136][ T5246] usb 3-1: config 0 descriptor?? [ 952.838713][ T1240] team0 (unregistering): Port device team_slave_1 removed [ 953.052827][ T1240] team0 (unregistering): Port device team_slave_0 removed [ 953.407230][ T5246] usbhid 3-1:0.0: can't add hid device: -71 [ 953.415098][ T5246] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 953.482962][ T5246] usb 3-1: USB disconnect, device number 22 [ 954.254374][T11450] loop1: detected capacity change from 0 to 1024 [ 954.265725][T11437] loop3: detected capacity change from 0 to 4096 [ 954.274811][T11437] ntfs3: Unknown parameter '»»»»»»' [ 954.528940][T11453] loop2: detected capacity change from 0 to 1768 [ 954.648025][T11447] loop0: detected capacity change from 0 to 2048 [ 954.655754][ T2822] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 954.747147][T11453] 9pnet_fd: Insufficient options for proto=fd [ 955.058341][ T2822] usb 5-1: Using ep0 maxpacket: 8 [ 955.205113][T11447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 955.241493][ T2822] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 955.250885][ T2822] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 955.261195][ T2822] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 955.275505][ T2822] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 955.288023][ T2822] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 955.301691][ T2822] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 955.311210][ T2822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.336474][T11450] ext4: Bad value for 'mb_optimize_scan' [ 955.457245][ T2822] usbtmc 5-1:16.0: bulk endpoints not found [ 955.549012][ T29] audit: type=1326 audit(1727667949.621:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11445 comm="syz.0.1408" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29a7d7dff9 code=0x0 [ 955.943928][T10590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.003674][T11467] xt_connbytes: Forcing CT accounting to be enabled [ 956.074481][T11469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1415'. [ 956.638054][T11473] loop0: detected capacity change from 0 to 128 [ 956.650324][T11476] loop2: detected capacity change from 0 to 1024 [ 956.668558][T11476] EXT4-fs: Ignoring removed nomblk_io_submit option [ 956.783939][T11476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 957.288275][ T2822] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 957.492393][ T2822] usb 3-1: Using ep0 maxpacket: 16 [ 957.549532][ T2822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 957.588745][ T2822] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 957.598301][ T2822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.606932][ T2822] usb 3-1: Product: syz [ 957.611352][ T2822] usb 3-1: Manufacturer: syz [ 957.616397][ T2822] usb 3-1: SerialNumber: syz [ 957.649774][ T2822] usb 3-1: config 0 descriptor?? [ 957.685258][ T2822] hub 3-1:0.0: bad descriptor, ignoring hub [ 957.691559][ T2822] hub 3-1:0.0: probe with driver hub failed with error -5 [ 957.710528][ T2822] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input51 [ 957.937541][ T5252] usb 5-1: USB disconnect, device number 31 [ 958.398154][T11494] loop3: detected capacity change from 0 to 256 [ 958.513076][ T2822] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 958.520375][T11490] loop4: detected capacity change from 0 to 1768 [ 958.623533][T11494] pimreg2: entered allmulticast mode [ 958.697704][T11490] 9pnet_fd: Insufficient options for proto=fd [ 958.769577][ T2822] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 958.783445][ T2822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 958.795517][ T2822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 958.805654][ T2822] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 958.819101][ T2822] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 958.828531][ T2822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.864530][ T10] usb 3-1: USB disconnect, device number 23 [ 958.932514][T11494] loop3: detected capacity change from 256 to 11 [ 959.041931][ T2822] usb 1-1: config 0 descriptor?? [ 959.332425][T10596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.534720][T11499] bio_check_eod: 84 callbacks suppressed [ 959.534801][T11499] syz.3.1422: attempt to access beyond end of device [ 959.534801][T11499] loop3: rw=2049, sector=12, nr_sectors = 4 limit=11 [ 959.554355][T11499] buffer_io_error: 12 callbacks suppressed [ 959.554431][T11499] Buffer I/O error on dev loop3, logical block 3, lost sync page write [ 959.763209][T11505] loop1: detected capacity change from 0 to 2048 [ 959.857876][T11505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.939697][T10992] syz-executor: attempt to access beyond end of device [ 959.939697][T10992] loop3: rw=0, sector=12, nr_sectors = 4 limit=11 [ 959.953769][T10992] FAT-fs (loop3): Directory bread(block 3) failed [ 960.022416][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 960.063819][ T2822] usbhid 1-1:0.0: can't add hid device: -71 [ 960.070446][ T2822] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 960.091841][ T2822] usb 1-1: USB disconnect, device number 29 [ 960.109102][ T4520] kworker/u8:29: attempt to access beyond end of device [ 960.109102][ T4520] loop3: rw=1, sector=80, nr_sectors = 64 limit=11 [ 960.123901][ T4520] kworker/u8:29: attempt to access beyond end of device [ 960.123901][ T4520] loop3: rw=1, sector=176, nr_sectors = 64 limit=11 [ 960.178664][ T4520] kworker/u8:29: attempt to access beyond end of device [ 960.178664][ T4520] loop3: rw=1, sector=16, nr_sectors = 8 limit=11 [ 960.197643][ T4520] kworker/u8:29: attempt to access beyond end of device [ 960.197643][ T4520] loop3: rw=0, sector=12, nr_sectors = 4 limit=11 [ 960.213330][ T4520] FAT-fs (loop3): unable to read inode block for updating (i_pos 202) [ 960.244950][ T29] audit: type=1326 audit(1727667954.321:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11501 comm="syz.1.1424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e7997dff9 code=0x0 [ 960.265230][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 960.348732][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 960.360166][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 960.370353][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 960.381923][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 960.489755][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 960.506691][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.517316][ T10] usb 3-1: Product: syz [ 960.521746][ T10] usb 3-1: Manufacturer: syz [ 960.526794][ T10] usb 3-1: SerialNumber: syz [ 960.649562][T11023] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.658398][T11513] xt_connbytes: Forcing CT accounting to be enabled [ 960.879959][ T1240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.291265][T11519] loop1: detected capacity change from 0 to 256 [ 961.352354][ T1240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.545986][ T1240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.560754][ T2822] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 961.742193][ T2822] usb 1-1: Using ep0 maxpacket: 8 [ 961.769913][ T2822] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 961.778636][ T2822] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 961.789066][ T2822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 961.799253][ T2822] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 961.809480][ T2822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 961.819861][ T2822] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 961.837087][ T2822] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 961.842807][ T29] audit: type=1804 audit(1727667955.851:171): pid=11519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1429" name="/newroot/16/file0/file0" dev="loop1" ino=1048749 res=1 errno=0 [ 961.847705][ T2822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.233527][ T2822] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 962.345247][ T1240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.678110][T11023] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 962.686259][T11023] FAT-fs (loop1): Filesystem has been set read-only [ 962.876289][ T1240] bridge_slave_1: left allmulticast mode [ 962.882697][ T1240] bridge_slave_1: left promiscuous mode [ 962.889337][ T1240] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.984898][T11023] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 963.017457][ T1240] bridge_slave_0: left allmulticast mode [ 963.023584][ T1240] bridge_slave_0: left promiscuous mode [ 963.030246][ T1240] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.189096][ T10] usb 3-1: unit 5 not found! [ 963.391323][ T10] usb 3-1: USB disconnect, device number 24 [ 963.537760][ T9182] Bluetooth: hci7: command 0x0406 tx timeout [ 963.544617][ T9182] Bluetooth: hci4: command 0x0406 tx timeout [ 964.091795][T11529] loop2: detected capacity change from 0 to 1024 [ 964.100439][T10871] udevd[10871]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 964.101634][T11529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 964.371104][ T1240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.423840][ T2822] usb 1-1: USB disconnect, device number 30 [ 964.450146][ T5199] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 964.460112][ T5199] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 964.469939][ T5199] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 964.484418][ T5199] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 964.540587][ T5199] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 964.655058][ T1240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.732296][ T1240] bond0 (unregistering): Released all slaves [ 964.777572][ T5199] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 964.837544][T11529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 965.286936][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 965.443641][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 965.492567][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 965.776940][ T10] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 965.786838][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.795335][ T10] usb 3-1: Product: syz [ 965.799746][ T10] usb 3-1: Manufacturer: syz [ 965.804700][ T10] usb 3-1: SerialNumber: syz [ 965.940209][ T10] usb 3-1: config 0 descriptor?? [ 966.035476][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 966.041769][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 966.058066][ T10] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input52 [ 966.281657][ T1240] hsr_slave_0: left promiscuous mode [ 966.352687][ T1240] hsr_slave_1: left promiscuous mode [ 966.373402][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 966.381304][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.411788][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 966.420165][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 966.499280][ T1240] veth1_macvtap: left promiscuous mode [ 966.505762][ T1240] veth0_macvtap: left promiscuous mode [ 966.511686][ T1240] veth1_vlan: left promiscuous mode [ 966.517563][ T1240] veth0_vlan: left promiscuous mode [ 966.892550][ T5196] Bluetooth: hci1: command tx timeout [ 967.216133][T10596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.260059][ T1240] pimreg2 (unregistering): left allmulticast mode [ 968.205612][ T1240] team0 (unregistering): Port device team_slave_1 removed [ 968.239648][ T1240] team0 (unregistering): Port device team_slave_0 removed [ 968.653028][ T5196] Bluetooth: hci5: command 0x0406 tx timeout [ 968.739949][ T5194] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 968.750212][ T5194] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 968.766000][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 968.856469][ T5199] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 968.911794][ T5199] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 968.930263][ T5199] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 968.939733][ T5199] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 968.972299][ T5199] Bluetooth: hci1: command tx timeout [ 969.292186][T11570] xt_connbytes: Forcing CT accounting to be enabled [ 969.483866][T11574] netlink: 'syz.0.1448': attribute type 3 has an invalid length. [ 969.492243][T11574] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1448'. [ 969.583718][ T1240] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.699734][T11577] loop4: detected capacity change from 0 to 128 [ 969.861270][ T1240] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.009613][T11577] loop4: detected capacity change from 0 to 16 [ 970.069980][T11575] loop0: detected capacity change from 0 to 2048 [ 970.080671][T11577] erofs: (device loop4): mounted with root inode @ nid 36. [ 970.162394][ T1240] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.162685][T11575] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 970.262373][ T1240] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.341427][T11530] chnl_net:caif_netlink_parms(): no params data found [ 970.492709][T11577] overlayfs: failed to get redirect (-117) [ 970.534304][T11577] overlayfs: failed to get redirect (-117) [ 971.152705][ T5196] Bluetooth: hci1: command tx timeout [ 971.241650][ T1240] bridge_slave_1: left allmulticast mode [ 971.254258][ T1240] bridge_slave_1: left promiscuous mode [ 971.260829][ T1240] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.403423][ T5199] Bluetooth: hci3: command tx timeout [ 971.441376][ T1240] bridge_slave_0: left allmulticast mode [ 971.447472][ T1240] bridge_slave_0: left promiscuous mode [ 971.467065][ T1240] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.902902][T11591] loop4: detected capacity change from 0 to 1024 [ 973.026377][T11591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 973.117334][ T5246] usb 3-1: USB disconnect, device number 25 [ 973.136792][T11591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 973.234703][ T5199] Bluetooth: hci1: command tx timeout [ 973.312180][ T1240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.408491][ T1240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.459163][ T5199] Bluetooth: hci3: command tx timeout [ 973.470687][ T1240] bond0 (unregistering): Released all slaves [ 973.814510][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 973.915532][T11599] loop2: detected capacity change from 0 to 2048 [ 973.926137][T11563] chnl_net:caif_netlink_parms(): no params data found [ 974.052679][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 974.162922][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 974.201743][ T10] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 974.211457][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.222603][ T10] usb 5-1: Product: syz [ 974.227038][ T10] usb 5-1: Manufacturer: syz [ 974.227308][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1454'. [ 974.231788][ T10] usb 5-1: SerialNumber: syz [ 974.383835][T11599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 974.428934][ T10] usb 5-1: config 0 descriptor?? [ 974.484821][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 974.491026][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 974.508777][ T10] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input53 [ 974.542609][ T1240] hsr_slave_0: left promiscuous mode [ 974.685125][ T1240] hsr_slave_1: left promiscuous mode [ 974.693823][ T29] audit: type=1326 audit(1727667968.741:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11596 comm="syz.2.1451" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ef197dff9 code=0x0 [ 974.751483][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 974.759569][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 974.794542][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 974.802695][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 974.873587][ T1240] veth1_macvtap: left promiscuous mode [ 974.879367][ T1240] veth0_macvtap: left promiscuous mode [ 974.879943][T11613] loop0: detected capacity change from 0 to 256 [ 974.885658][ T1240] veth1_vlan: left promiscuous mode [ 974.885897][ T1240] veth0_vlan: left promiscuous mode [ 975.103938][T10596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.130642][T11613] vfat: Unknown parameter 'u' [ 975.339024][T11613] loop0: detected capacity change from 0 to 164 [ 975.423939][T11613] iso9660: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ' [ 975.466694][T11613] overlayfs: missing 'lowerdir' [ 975.611147][ T5199] Bluetooth: hci3: command tx timeout [ 975.896498][T10606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.932511][ T5246] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 976.282444][ T5246] usb 1-1: device descriptor read/64, error -71 [ 976.396692][ T1240] team0 (unregistering): Port device team_slave_1 removed [ 976.448481][ T1240] team0 (unregistering): Port device team_slave_0 removed [ 976.603154][ T5246] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 976.792279][ T5246] usb 1-1: device descriptor read/64, error -71 [ 976.852970][T10872] usb 5-1: reset high-speed USB device number 32 using dummy_hcd [ 976.892995][T10872] usb 5-1: device reset changed ep0 maxpacket size! [ 976.930474][ T5246] usb usb1-port1: attempt power cycle [ 976.938373][T10696] usb 5-1: USB disconnect, device number 32 [ 977.353697][ T5246] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 977.456686][ T5246] usb 1-1: device descriptor read/8, error -71 [ 977.512475][T10696] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 977.576986][T11530] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.586167][T11530] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.599994][T11530] bridge_slave_0: entered allmulticast mode [ 977.609068][T11530] bridge_slave_0: entered promiscuous mode [ 977.695146][T11530] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.699564][ T5199] Bluetooth: hci3: command tx timeout [ 977.708453][T11530] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.716370][T11530] bridge_slave_1: entered allmulticast mode [ 977.725610][T11530] bridge_slave_1: entered promiscuous mode [ 977.745588][T10696] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 977.752882][ T5246] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 977.755196][T10696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.868479][T10696] usb 5-1: config 0 descriptor?? [ 977.919600][T10696] gspca_main: spca508-2.14.0 probing 8086:0110 [ 978.069975][ T5246] usb 1-1: device descriptor read/8, error -71 [ 978.186546][ T5246] usb usb1-port1: unable to enumerate USB device [ 978.337575][T10696] gspca_spca508: reg_read err -71 [ 978.372432][T10696] gspca_spca508: reg_read err -71 [ 978.402310][T10696] gspca_spca508: reg_read err -71 [ 978.439988][T10696] gspca_spca508: reg_read err -71 [ 978.628240][T11530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.891420][T11530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.905740][T11563] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.913750][T11563] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.921580][T11563] bridge_slave_0: entered allmulticast mode [ 978.935976][T11563] bridge_slave_0: entered promiscuous mode [ 979.091611][T10696] gspca_spca508: reg_read err -71 [ 979.098391][T10696] gspca_spca508: reg write: error -71 [ 979.104351][T10696] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 979.127535][T10696] usb 5-1: USB disconnect, device number 33 [ 979.478905][T11563] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.488184][T11563] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.496274][T11563] bridge_slave_1: entered allmulticast mode [ 979.505525][T11563] bridge_slave_1: entered promiscuous mode [ 979.539084][T11530] team0: Port device team_slave_0 added [ 979.861454][T11530] team0: Port device team_slave_1 added [ 979.929865][T11563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.312188][T11654] loop0: detected capacity change from 0 to 256 [ 980.349954][T11639] loop2: detected capacity change from 0 to 4096 [ 980.450866][T11563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.538288][T11530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.546162][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.579272][T11530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.599305][T11530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.606628][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.617966][T11639] ntfs3: loop2: Failed to load $MFT (-22). [ 980.633194][T11530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.898584][T11563] team0: Port device team_slave_0 added [ 981.031308][T11563] team0: Port device team_slave_1 added [ 981.063384][T11530] hsr_slave_0: entered promiscuous mode [ 981.118076][T11530] hsr_slave_1: entered promiscuous mode [ 981.200850][T11530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 981.208955][T11530] Cannot create hsr debugfs directory [ 981.569518][T11660] loop4: detected capacity change from 0 to 2048 [ 981.717930][T11563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 981.726327][T11563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.752992][T11563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.778009][T11664] loop0: detected capacity change from 0 to 1024 [ 981.828905][T11660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 981.832900][T11563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.849010][T11563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.854715][T11664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 981.879303][T11563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.035716][T11664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.143382][ T29] audit: type=1326 audit(1727667976.181:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.4.1464" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a3077dff9 code=0x0 [ 982.316954][T11563] hsr_slave_0: entered promiscuous mode [ 982.358364][T11563] hsr_slave_1: entered promiscuous mode [ 982.371230][T11563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 982.379386][T11563] Cannot create hsr debugfs directory [ 982.393401][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 982.590169][T10606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.622326][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 982.739270][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 982.834096][ T10] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 982.843790][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.853235][ T10] usb 1-1: Product: syz [ 982.857649][ T10] usb 1-1: Manufacturer: syz [ 982.862751][ T10] usb 1-1: SerialNumber: syz [ 982.878195][ T10] usb 1-1: config 0 descriptor?? [ 982.986389][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 982.992723][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 983.008888][ T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input54 [ 984.362391][T11689] mac80211_hwsim hwsim65 wlan1: entered allmulticast mode [ 984.374926][T10590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.208661][T11563] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 985.245356][T11563] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 985.278110][T11563] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 985.298161][T11530] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 985.322677][T11701] loop4: detected capacity change from 0 to 256 [ 985.331160][T11696] loop0: detected capacity change from 0 to 1768 [ 985.356661][T11563] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 985.428397][T11530] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 985.544808][T11530] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 985.673488][T11530] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 986.920112][T11563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.951056][T11712] loop0: detected capacity change from 0 to 2048 [ 987.088560][T11712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 987.201438][T11563] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.258288][T11530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.284979][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.292728][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.357196][T11530] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.436690][ T3086] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.444467][ T3086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.459837][ T3086] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.467624][ T3086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.487653][ T3086] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.495754][ T3086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.800914][ T29] audit: type=1326 audit(1727667981.791:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11707 comm="syz.0.1475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29a7d7dff9 code=0x0 [ 987.832945][T11563] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 987.846998][T11563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 987.995144][T11530] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 988.006325][T11530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 988.114870][T10696] usb 1-1: USB disconnect, device number 35 [ 988.366922][T10590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.395989][T11735] loop2: detected capacity change from 0 to 1024 [ 989.425736][T11735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 989.624545][T11735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 990.080617][T11563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.162559][T10696] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 990.340649][T11530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.505438][T11563] veth0_vlan: entered promiscuous mode [ 990.556499][T11563] veth1_vlan: entered promiscuous mode [ 990.776600][T11563] veth0_macvtap: entered promiscuous mode [ 990.792521][T10696] usb 3-1: Using ep0 maxpacket: 16 [ 990.820466][T10696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 990.853477][T11563] veth1_macvtap: entered promiscuous mode [ 990.857149][T10696] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 990.868955][T10696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.877329][T10696] usb 3-1: Product: syz [ 990.881832][T10696] usb 3-1: Manufacturer: syz [ 990.886774][T10696] usb 3-1: SerialNumber: syz [ 990.948942][T11530] veth0_vlan: entered promiscuous mode [ 991.035041][T10696] usb 3-1: config 0 descriptor?? [ 991.069567][T11530] veth1_vlan: entered promiscuous mode [ 991.077993][T10696] hub 3-1:0.0: bad descriptor, ignoring hub [ 991.084526][T10696] hub 3-1:0.0: probe with driver hub failed with error -5 [ 991.090425][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.099827][T10696] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input55 [ 991.102674][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.126152][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.138075][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.148380][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.160791][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.171074][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.182011][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.192530][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.203377][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.223119][T11563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.311505][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.326240][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.337368][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.348610][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.358842][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.369679][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.380278][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.391079][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.401288][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.412380][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.431479][T11563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.450853][T11563] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.462180][T11563] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.471323][T11563] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.481127][T11563] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.604044][T11530] veth0_macvtap: entered promiscuous mode [ 991.661764][T11530] veth1_macvtap: entered promiscuous mode [ 991.770425][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.782293][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.792640][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.803469][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.813748][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.824564][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.837995][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.849673][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.859893][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.870840][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.881103][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.891912][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.907015][T11530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.977114][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.990733][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.000991][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.012569][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.022807][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.036832][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.047842][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.058697][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.068972][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.079802][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.090144][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.103946][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.118777][T11530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.142459][T11530] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.151519][T11530] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.160779][T11530] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.170059][T11530] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.645079][T10596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.458036][T11762] loop2: detected capacity change from 0 to 1768 [ 994.955203][ T29] audit: type=1326 audit(1727667989.021:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11785 comm="syz.4.1487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f3a3077dff9 code=0x0 [ 995.124267][T11792] xt_connbytes: Forcing CT accounting to be enabled [ 995.318898][T11787] loop2: detected capacity change from 0 to 2048 [ 995.505007][T11787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.844501][ T29] audit: type=1326 audit(1727667989.911:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11781 comm="syz.2.1486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ef197dff9 code=0x0 [ 996.228927][ T25] usb 3-1: USB disconnect, device number 26 [ 996.635937][T10596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.500461][T11826] loop2: detected capacity change from 0 to 1024 [ 997.554265][T11826] EXT4-fs: Ignoring removed nomblk_io_submit option [ 997.863586][T11799] loop0: detected capacity change from 0 to 4096 [ 997.936227][T11826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.034250][T11799] ntfs3: loop0: Failed to load $MFT (-22). [ 998.232658][ T5250] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 998.545774][ T5250] usb 3-1: Using ep0 maxpacket: 16 [ 998.758065][T11841] loop0: detected capacity change from 0 to 1768 [ 999.084181][ T3816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.093367][ T3816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.111626][ T5250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 999.131803][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.140022][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.197264][ T5250] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 999.209622][ T5250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.221425][ T5250] usb 3-1: Product: syz [ 999.226183][ T5250] usb 3-1: Manufacturer: syz [ 999.231026][ T5250] usb 3-1: SerialNumber: syz [ 999.285878][ T5250] usb 3-1: config 0 descriptor?? [ 999.299259][ T5250] hub 3-1:0.0: bad descriptor, ignoring hub [ 999.311453][ T5250] hub 3-1:0.0: probe with driver hub failed with error -5 [ 999.338850][ T5250] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input56 [ 1000.142472][ T5250] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1000.402700][ T5250] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1000.414742][ T5250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1000.426144][ T5250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1000.439102][ T5250] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1000.453362][ T5250] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1000.463013][ T5250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.589438][T10596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.696714][ T5250] usb 2-1: config 0 descriptor?? [ 1001.070985][T10719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.079804][T10719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.197963][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.206494][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.797882][ T5250] usbhid 2-1:0.0: can't add hid device: -71 [ 1001.804767][ T5250] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1001.918602][ T5250] usb 2-1: USB disconnect, device number 28 [ 1002.201068][T11883] loop3: detected capacity change from 0 to 256 [ 1002.256203][T11883] FAT-fs (loop3): bogus logical sector size 0 [ 1002.262803][T11883] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1002.341135][T11879] loop0: detected capacity change from 0 to 2048 [ 1002.604634][T11879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1002.793544][ T25] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1002.912531][ T29] audit: type=1326 audit(1727667996.991:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.0.1499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29a7d7dff9 code=0x0 [ 1003.039702][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 1003.344078][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1003.355195][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1003.367252][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1003.377452][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1003.543200][T11904] input: syz1 as /devices/virtual/input/input57 [ 1003.652360][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1003.661844][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.670375][ T25] usb 4-1: Product: syz [ 1003.674992][ T25] usb 4-1: Manufacturer: syz [ 1003.679833][ T25] usb 4-1: SerialNumber: syz [ 1003.759192][T10590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.823776][ T25] usb 4-1: config 0 descriptor?? [ 1003.919062][ T25] appledisplay 4-1:0.0: Could not find int-in endpoint [ 1003.931224][ T25] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1004.169684][T11883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1004.182518][ T5250] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1004.280061][T11911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1506'. [ 1004.309996][ T5246] usb 3-1: USB disconnect, device number 27 [ 1004.431632][ T5250] usb 5-1: Using ep0 maxpacket: 16 [ 1004.595742][T11911] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1506'. [ 1004.725836][ T25] usb 4-1: USB disconnect, device number 36 [ 1004.983842][ T5250] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1004.993806][ T5250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.002357][ T5250] usb 5-1: Product: syz [ 1005.006775][ T5250] usb 5-1: Manufacturer: syz [ 1005.011619][ T5250] usb 5-1: SerialNumber: syz [ 1005.025044][ T5250] usb 5-1: config 0 descriptor?? [ 1005.065184][ T5250] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1005.200637][T11915] loop0: detected capacity change from 0 to 1768 [ 1005.277552][ T5250] gp8psk: usb in 128 operation failed. [ 1005.296265][ T5250] gp8psk: usb in 137 operation failed. [ 1005.302529][ T5250] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1005.414348][ T5250] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1005.424153][ T5250] usb 5-1: media controller created [ 1005.530021][ T5250] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1005.594186][T11920] loop1: detected capacity change from 0 to 1024 [ 1005.620196][T11920] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1005.759604][T11920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1006.048092][T11932] FAULT_INJECTION: forcing a failure. [ 1006.048092][T11932] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.067499][T11932] CPU: 0 UID: 0 PID: 11932 Comm: syz.3.1510 Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 1006.078244][T11932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1006.088557][T11932] Call Trace: [ 1006.092044][T11932] [ 1006.095169][T11932] dump_stack_lvl+0x216/0x2d0 [ 1006.100186][T11932] dump_stack+0x1e/0x30 [ 1006.104661][T11932] should_fail_ex+0x748/0x7f0 [ 1006.109841][T11932] should_failslab+0x17f/0x210 [ 1006.114905][T11932] __kmalloc_noprof+0x175/0xf30 [ 1006.120074][T11932] ? tomoyo_realpath_from_path+0x104/0xaa0 [ 1006.126194][T11932] ? kmsan_get_metadata+0x13e/0x1c0 [ 1006.131709][T11932] tomoyo_realpath_from_path+0x104/0xaa0 [ 1006.137677][T11932] ? __srcu_read_lock+0x76/0xd0 [ 1006.142847][T11932] tomoyo_path_number_perm+0x1d9/0x8f0 [ 1006.148663][T11932] ? kmsan_get_metadata+0x13e/0x1c0 [ 1006.154175][T11932] ? kmsan_get_metadata+0x13e/0x1c0 [ 1006.159751][T11932] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1006.165878][T11932] tomoyo_file_ioctl+0x3f/0x50 [ 1006.171030][T11932] security_file_ioctl+0x145/0x590 [ 1006.176473][T11932] __se_sys_ioctl+0xd3/0x450 [ 1006.181385][T11932] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1006.187515][T11932] __x64_sys_ioctl+0x96/0xe0 [ 1006.192411][T11932] x64_sys_call+0x18bf/0x3ba0 [ 1006.197413][T11932] do_syscall_64+0xcd/0x1e0 [ 1006.202229][T11932] ? clear_bhb_loop+0x25/0x80 [ 1006.207197][T11932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.213439][T11932] RIP: 0033:0x7f92cd37dff9 [ 1006.218112][T11932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.238170][T11932] RSP: 002b:00007f92ce16e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1006.246945][T11932] RAX: ffffffffffffffda RBX: 00007f92cd535f80 RCX: 00007f92cd37dff9 [ 1006.255194][T11932] RDX: 0000000020000080 RSI: 00000000c0285629 RDI: 0000000000000003 [ 1006.263447][T11932] RBP: 00007f92ce16e090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.271850][T11932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.280075][T11932] R13: 0000000000000000 R14: 00007f92cd535f80 R15: 00007ffe3b2dd808 [ 1006.288322][T11932] [ 1006.299279][T11932] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1006.343248][ T5250] gp8psk_fe: Frontend revision 1 attached [ 1006.349263][ T5250] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1006.358431][ T5250] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1006.539052][T10696] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1007.478350][ T5250] gp8psk: usb in 138 operation failed. [ 1007.484311][ T5250] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1007.501320][ T5250] gp8psk: found Genpix USB device pID = 201 (hex) [ 1007.555434][T10696] usb 2-1: Using ep0 maxpacket: 16 [ 1007.590052][T10696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1007.638218][T10696] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1007.648141][T10696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.656753][T10696] usb 2-1: Product: syz [ 1007.661440][T10696] usb 2-1: Manufacturer: syz [ 1007.666449][T10696] usb 2-1: SerialNumber: syz [ 1007.843280][ T25] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1007.867176][T10696] usb 2-1: config 0 descriptor?? [ 1007.956670][T10696] hub 2-1:0.0: bad descriptor, ignoring hub [ 1007.964827][T10696] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1007.981782][T10696] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input58 [ 1007.992624][ T10] usb 5-1: USB disconnect, device number 34 [ 1008.096023][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1008.108415][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1008.124047][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1008.135529][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1008.148931][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1008.158378][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.423326][T11563] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.509064][ T25] usb 1-1: config 0 descriptor?? [ 1008.695810][T11959] FAULT_INJECTION: forcing a failure. [ 1008.695810][T11959] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.709407][T11959] CPU: 0 UID: 0 PID: 11959 Comm: syz.3.1517 Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 1008.720135][T11959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1008.730444][T11959] Call Trace: [ 1008.734178][T11959] [ 1008.737390][T11959] dump_stack_lvl+0x216/0x2d0 [ 1008.742412][T11959] dump_stack+0x1e/0x30 [ 1008.746864][T11959] should_fail_ex+0x748/0x7f0 [ 1008.751859][T11959] should_failslab+0x17f/0x210 [ 1008.756888][T11959] __kmalloc_noprof+0x175/0xf30 [ 1008.762039][T11959] ? tomoyo_realpath_from_path+0x104/0xaa0 [ 1008.768234][T11959] ? kmsan_get_metadata+0x13e/0x1c0 [ 1008.773711][T11959] tomoyo_realpath_from_path+0x104/0xaa0 [ 1008.779652][T11959] ? __srcu_read_lock+0x76/0xd0 [ 1008.784816][T11959] tomoyo_path_number_perm+0x1d9/0x8f0 [ 1008.790598][T11959] ? kmsan_get_metadata+0x13e/0x1c0 [ 1008.796074][T11959] ? kmsan_get_metadata+0x13e/0x1c0 [ 1008.801536][T11959] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1008.807637][T11959] tomoyo_file_ioctl+0x3f/0x50 [ 1008.812693][T11959] security_file_ioctl+0x145/0x590 [ 1008.818274][T11959] __se_sys_ioctl+0xd3/0x450 [ 1008.823143][T11959] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1008.829223][T11959] __x64_sys_ioctl+0x96/0xe0 [ 1008.834097][T11959] x64_sys_call+0x18bf/0x3ba0 [ 1008.839088][T11959] do_syscall_64+0xcd/0x1e0 [ 1008.843886][T11959] ? clear_bhb_loop+0x25/0x80 [ 1008.848830][T11959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.855129][T11959] RIP: 0033:0x7f92cd37dff9 [ 1008.859776][T11959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.879775][T11959] RSP: 002b:00007f92ce16e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1008.888500][T11959] RAX: ffffffffffffffda RBX: 00007f92cd535f80 RCX: 00007f92cd37dff9 [ 1008.896718][T11959] RDX: 0000000000000000 RSI: 0000000000008905 RDI: 0000000000000003 [ 1008.904920][T11959] RBP: 00007f92ce16e090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.913138][T11959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.921330][T11959] R13: 0000000000000000 R14: 00007f92cd535f80 R15: 00007ffe3b2dd808 [ 1008.929578][T11959] [ 1008.941352][T11959] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1009.255878][T11963] xt_connbytes: Forcing CT accounting to be enabled [ 1009.520287][T11967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'. [ 1009.529737][T11967] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1009.579292][T11967] loop4: detected capacity change from 0 to 512 [ 1009.900073][T11973] loop3: detected capacity change from 0 to 2048 [ 1010.040043][ T10] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1010.243378][T11967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.268879][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 1010.276372][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1010.289957][ T25] usb 1-1: USB disconnect, device number 36 [ 1010.380564][T11967] loop4: detected capacity change from 512 to 11 [ 1010.444476][T11967] Dev loop4: unable to read RDB block 11 [ 1010.450748][T11967] loop4: unable to read partition table [ 1010.681300][T11967] loop4: partition table beyond EOD, truncated [ 1010.688184][T11967] loop_reread_partitions: partition scan of loop4 (ï5ŸA;¹8R÷ÖÑÎ])Ãî^\©) failed (rc=-5) [ 1010.989897][T11982] loop2: detected capacity change from 0 to 1024 [ 1011.134659][T11982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1011.159368][T11986] xt_NFQUEUE: number of total queues is 0 [ 1011.195705][T11982] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1011.212754][T11982] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 1011.219032][T11978] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:492: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 2 [ 1011.225689][T11982] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1011.225689][T11982] [ 1011.225799][T11982] EXT4-fs (loop2): Total free blocks count 0 [ 1011.240508][T11978] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:492: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 2 [ 1011.250090][T11982] EXT4-fs (loop2): Free/Dirty block details [ 1011.277480][T11982] EXT4-fs (loop2): free_blocks=68451041280 [ 1011.289192][T11982] EXT4-fs (loop2): dirty_blocks=16 [ 1011.296037][T11982] EXT4-fs (loop2): Block reservation details [ 1011.302581][T11982] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 1011.413063][T11994] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1011.437444][T11982] EXT4-fs: Ignoring removed mblk_io_submit option [ 1011.444372][T11982] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1011.679738][T10606] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 1011.698976][T10606] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5780: Out of memory [ 1011.788302][T10606] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 1011.999883][T10596] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /71/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1012.098711][T10596] EXT4-fs error (device loop2): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1012.149038][T10606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.188957][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1012.255007][T10596] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /71/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1012.312802][T10596] EXT4-fs error (device loop2): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1012.403864][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1012.460862][T12002] netlink: 'syz.1.1530': attribute type 1 has an invalid length. [ 1012.492347][T10596] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /71/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1012.541095][T11997] loop3: detected capacity change from 0 to 1024 [ 1012.563841][T10596] EXT4-fs error (device loop2): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1012.586494][T11997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1012.595954][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1012.610132][T10596] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /71/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1012.632694][ T4609] usb 2-1: reset high-speed USB device number 29 using dummy_hcd [ 1012.771204][T10596] EXT4-fs error (device loop2): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1012.843649][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1012.857426][T10596] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /71/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1012.881719][ T4609] usb 2-1: device reset changed ep0 maxpacket size! [ 1012.985884][ T2960] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.053499][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1531'. [ 1013.063358][T12007] netlink: 'syz.0.1531': attribute type 18 has an invalid length. [ 1013.085109][T12007] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1013.094435][T12007] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1013.103628][T12007] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1013.112777][T12007] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1013.122028][T12007] vxlan0: entered promiscuous mode [ 1013.188507][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1013.221047][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1013.328443][T11997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1013.413543][ T5250] usb 2-1: USB disconnect, device number 29 [ 1013.430061][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1013.513903][ T2960] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.579875][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1013.627556][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1013.644527][T10696] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1013.822620][T10696] usb 4-1: Using ep0 maxpacket: 16 [ 1013.831723][ T5196] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1013.842779][ T5196] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1013.857427][ T5196] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1013.864585][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1013.887319][ T5196] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1013.898450][ T5196] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1013.909136][ T5196] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1013.979024][ T2960] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.991563][T10696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1014.176201][T10696] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1014.186117][T10696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.195042][T10696] usb 4-1: Product: syz [ 1014.199445][T10696] usb 4-1: Manufacturer: syz [ 1014.204384][T10696] usb 4-1: SerialNumber: syz [ 1014.352209][ T5250] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1014.372338][T10696] usb 4-1: config 0 descriptor?? [ 1014.395322][T10696] hub 4-1:0.0: bad descriptor, ignoring hub [ 1014.401706][T10696] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1014.411648][ T2960] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.417705][T10696] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input59 [ 1014.631367][ T5250] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 1014.640958][ T5250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.747080][ T5250] usb 2-1: config 0 descriptor?? [ 1014.771768][ T5250] bfusb 2-1:0.0: probe with driver bfusb failed with error -5 [ 1014.796868][ T2960] bridge_slave_1: left allmulticast mode [ 1014.803039][ T2960] bridge_slave_1: left promiscuous mode [ 1014.809620][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.977561][ T2960] bridge_slave_0: left allmulticast mode [ 1014.983641][ T2960] bridge_slave_0: left promiscuous mode [ 1014.990239][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.091532][T10696] usb 2-1: USB disconnect, device number 30 [ 1015.161096][T12016] loop0: detected capacity change from 0 to 4096 [ 1016.036648][ T5196] Bluetooth: hci5: command tx timeout [ 1016.077840][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.205581][T11530] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.223712][T10596] EXT4-fs error: 119 callbacks suppressed [ 1016.223851][T10596] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /71/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1016.278487][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.358211][ T2960] bond0 (unregistering): Released all slaves [ 1016.384059][T10596] EXT4-fs error (device loop2): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1016.488230][T10596] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /71/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1016.739384][T10596] EXT4-fs error (device loop2): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1016.838165][T10596] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /71/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1016.859445][ C1] vkms_vblank_simulate: vblank timer overrun [ 1016.875385][T10596] EXT4-fs error (device loop2): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1016.935976][T10596] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /71/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1016.957262][ C1] vkms_vblank_simulate: vblank timer overrun [ 1016.978534][T10596] EXT4-fs error (device loop2): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1017.001875][T10596] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /71/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1017.024120][ C1] vkms_vblank_simulate: vblank timer overrun [ 1017.095691][T10596] EXT4-fs error (device loop2): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1017.286046][T10596] EXT4-fs warning: 58 callbacks suppressed [ 1017.286122][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1017.406441][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1017.444208][ T2960] hsr_slave_0: left promiscuous mode [ 1017.481477][ T2960] hsr_slave_1: left promiscuous mode [ 1017.511890][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1017.543286][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1017.551174][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.619951][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1017.645940][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1017.654150][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.712550][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1017.813798][ T2960] veth1_macvtap: left promiscuous mode [ 1017.819581][ T2960] veth0_macvtap: left promiscuous mode [ 1017.826009][ T2960] veth1_vlan: left promiscuous mode [ 1017.831823][ T2960] veth0_vlan: left promiscuous mode [ 1017.872932][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1017.976775][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1018.035267][T12052] loop0: detected capacity change from 0 to 8 [ 1018.079822][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1018.093631][ T5196] Bluetooth: hci5: command tx timeout [ 1018.315604][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1018.341304][T10596] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 1019.335321][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 1019.505454][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 1020.172581][ T5196] Bluetooth: hci5: command tx timeout [ 1020.175651][T12013] chnl_net:caif_netlink_parms(): no params data found [ 1020.280583][T12075] loop1: detected capacity change from 0 to 64 [ 1020.475538][ T10] usb 4-1: USB disconnect, device number 37 [ 1020.870901][T10596] EXT4-fs: 9 callbacks suppressed [ 1020.870980][T10596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.313360][ T2960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.857404][ T2960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.217623][T12013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.225545][T12013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.233603][T12013] bridge_slave_0: entered allmulticast mode [ 1022.247211][T12013] bridge_slave_0: entered promiscuous mode [ 1022.262683][ T25] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1022.273994][ T5196] Bluetooth: hci5: command tx timeout [ 1022.452701][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 1022.476073][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.487564][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.497823][ T25] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 1022.507252][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.579202][ T5199] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1022.581076][ T2960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.605586][ T5199] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1022.626684][ T5199] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1022.636437][T12013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.644787][ T25] usb 4-1: config 0 descriptor?? [ 1022.660815][T12013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.670629][T12013] bridge_slave_1: entered allmulticast mode [ 1022.682494][T12013] bridge_slave_1: entered promiscuous mode [ 1022.716204][ T5199] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1022.730073][ T5199] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1022.742566][ T5199] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1023.117813][ T2960] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.145875][T12107] xt_cgroup: invalid path, errno=-2 [ 1023.274724][T12013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.318627][T12013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.348287][T12111] overlayfs: failed to resolve './file2': -2 [ 1023.932704][T12013] team0: Port device team_slave_0 added [ 1023.950581][T12013] team0: Port device team_slave_1 added [ 1024.162557][T12013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.169858][T12013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.201279][T12013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.286356][T12013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.297627][T12013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.324997][T12013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.374565][ T2960] bridge_slave_1: left allmulticast mode [ 1024.380719][ T2960] bridge_slave_1: left promiscuous mode [ 1024.387657][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.453711][ T2960] bridge_slave_0: left allmulticast mode [ 1024.459817][ T2960] bridge_slave_0: left promiscuous mode [ 1024.467860][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.968293][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 1024.975415][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1025.054294][ T5199] Bluetooth: hci6: command tx timeout [ 1025.173082][ T25] usb 4-1: USB disconnect, device number 38 [ 1025.513819][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.547529][T12131] loop1: detected capacity change from 0 to 2048 [ 1025.612192][T12131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1025.655853][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.713169][ T2960] bond0 (unregistering): Released all slaves [ 1025.838239][T12131] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 1025.956484][T12131] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 1026.254602][T12143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1560'. [ 1026.302975][ T25] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1026.360865][T12013] hsr_slave_0: entered promiscuous mode [ 1026.414646][T12013] hsr_slave_1: entered promiscuous mode [ 1026.467549][T12013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1026.475771][T12013] Cannot create hsr debugfs directory [ 1026.586937][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.598248][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1026.608376][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1026.619715][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1026.633134][ T25] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1026.642587][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.712698][ T25] usb 2-1: config 0 descriptor?? [ 1026.966544][ T25] usb 2-1: USB disconnect, device number 31 [ 1027.109039][ T2960] hsr_slave_0: left promiscuous mode [ 1027.142437][ T2960] hsr_slave_1: left promiscuous mode [ 1027.142613][ T5199] Bluetooth: hci6: command tx timeout [ 1027.175424][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1027.183785][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.220703][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1027.228841][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.291301][ T2960] veth1_macvtap: left promiscuous mode [ 1027.297740][ T2960] veth0_macvtap: left promiscuous mode [ 1027.303782][ T2960] veth1_vlan: left promiscuous mode [ 1027.309333][ T2960] veth0_vlan: left promiscuous mode [ 1027.384825][T12156] loop3: detected capacity change from 0 to 22 [ 1027.483660][T12156] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1027.658184][T12136] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1027.889845][T11563] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.177914][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 1028.290177][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 1029.212518][ T5199] Bluetooth: hci6: command tx timeout [ 1029.890038][T12099] chnl_net:caif_netlink_parms(): no params data found [ 1031.293090][ T5199] Bluetooth: hci6: command tx timeout [ 1032.030520][T12013] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1032.093072][T12099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.100771][T12099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.108956][T12099] bridge_slave_0: entered allmulticast mode [ 1032.118655][T12099] bridge_slave_0: entered promiscuous mode [ 1032.141745][T12013] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1032.260814][T12013] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1032.306713][T12099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.314529][T12099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.322627][T12099] bridge_slave_1: entered allmulticast mode [ 1032.331735][T12099] bridge_slave_1: entered promiscuous mode [ 1032.354516][T12013] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1032.554414][ T25] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1032.854345][T12099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.034681][T12099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.701831][T12099] team0: Port device team_slave_0 added [ 1033.798373][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.809010][ T25] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1033.820708][ T25] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1033.831075][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.848376][T12218] FAULT_INJECTION: forcing a failure. [ 1033.848376][T12218] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.866611][T12218] CPU: 0 UID: 0 PID: 12218 Comm: syz.3.1580 Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 1033.877357][T12218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1033.887655][T12218] Call Trace: [ 1033.891123][T12218] [ 1033.894244][T12218] dump_stack_lvl+0x216/0x2d0 [ 1033.899240][T12218] dump_stack+0x1e/0x30 [ 1033.903681][T12218] should_fail_ex+0x748/0x7f0 [ 1033.908670][T12218] should_failslab+0x17f/0x210 [ 1033.913708][T12218] __kmalloc_cache_noprof+0xbf/0xb00 [ 1033.919313][T12218] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1033.925406][T12218] ? virtio_transport_do_socket_init+0x64/0x4a0 [ 1033.931968][T12218] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1033.938064][T12218] ? __pfx_virtio_transport_do_socket_init+0x10/0x10 [ 1033.945065][T12218] virtio_transport_do_socket_init+0x64/0x4a0 [ 1033.951459][T12218] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1033.957550][T12218] ? __pfx_virtio_transport_do_socket_init+0x10/0x10 [ 1033.964554][T12218] vsock_assign_transport+0x9f4/0xb90 [ 1033.970267][T12218] vsock_connect+0x544/0x1560 [ 1033.975261][T12218] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1033.981760][T12218] ? kmsan_get_metadata+0x13e/0x1c0 [ 1033.987247][T12218] __sys_connect+0x600/0x690 [ 1033.992126][T12218] ? fput+0x286/0x320 [ 1033.996395][T12218] ? ksys_write+0x405/0x4c0 [ 1034.001196][T12218] ? ksys_write+0x416/0x4c0 [ 1034.005991][T12218] ? __pfx_vsock_connect+0x10/0x10 [ 1034.011441][T12218] __x64_sys_connect+0x91/0xe0 [ 1034.016587][T12218] x64_sys_call+0x27a5/0x3ba0 [ 1034.021578][T12218] do_syscall_64+0xcd/0x1e0 [ 1034.026385][T12218] ? clear_bhb_loop+0x25/0x80 [ 1034.031339][T12218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.037567][T12218] RIP: 0033:0x7f92cd37dff9 [ 1034.042235][T12218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1034.062150][T12218] RSP: 002b:00007f92ce16e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1034.070888][T12218] RAX: ffffffffffffffda RBX: 00007f92cd535f80 RCX: 00007f92cd37dff9 [ 1034.079131][T12218] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000006 [ 1034.087350][T12218] RBP: 00007f92ce16e090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.095564][T12218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1034.103777][T12218] R13: 0000000000000000 R14: 00007f92cd535f80 R15: 00007ffe3b2dd808 [ 1034.112024][T12218] [ 1034.132698][T12099] team0: Port device team_slave_1 added [ 1034.563871][T12099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.571738][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.598596][T12099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.660012][T12214] loop0: detected capacity change from 0 to 32768 [ 1034.676068][ T25] usb 2-1: config 0 descriptor?? [ 1034.728124][T12099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.738257][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.766381][T12099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.869811][T12214] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1034.956224][T12214] (syz.0.1578,12214,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "lloc=00000000000000000003" or missing value [ 1034.983508][T12224] ===================================================== [ 1034.990918][T12224] BUG: KMSAN: uninit-value in from_kuid+0x41e/0x990 [ 1034.998144][T12224] from_kuid+0x41e/0x990 [ 1035.002700][T12224] ocfs2_setattr+0x254/0x3140 [ 1035.007551][T12224] notify_change+0x1a8e/0x1b80 [ 1035.012632][T12224] do_truncate+0x22a/0x2b0 [ 1035.017237][T12224] path_openat+0x5c3c/0x6200 [ 1035.022118][T12224] do_filp_open+0x20e/0x590 [ 1035.026798][T12224] do_sys_openat2+0x1bf/0x2f0 [ 1035.031636][T12224] __x64_sys_openat+0x2a1/0x310 [ 1035.036788][T12224] x64_sys_call+0x120e/0x3ba0 [ 1035.046549][T12224] do_syscall_64+0xcd/0x1e0 [ 1035.051263][T12224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.059013][T12224] [ 1035.061436][T12224] Local variable newattrs created at: [ 1035.067105][T12224] do_truncate+0x4c/0x2b0 [ 1035.071619][T12224] path_openat+0x5c3c/0x6200 [ 1035.076513][T12224] [ 1035.078937][T12224] CPU: 0 UID: 0 PID: 12224 Comm: syz.0.1578 Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 1035.089663][T12224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1035.099989][T12224] ===================================================== [ 1035.107199][T12224] Disabling lock debugging due to kernel taint [ 1035.113667][T12224] Kernel panic - not syncing: kmsan.panic set ... [ 1035.120221][T12224] CPU: 0 UID: 0 PID: 12224 Comm: syz.0.1578 Tainted: G B 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 1035.132329][T12224] Tainted: [B]=BAD_PAGE [ 1035.136591][T12224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1035.146795][T12224] Call Trace: [ 1035.150186][T12224] [ 1035.153231][T12224] dump_stack_lvl+0x216/0x2d0 [ 1035.158123][T12224] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1035.164116][T12224] dump_stack+0x1e/0x30 [ 1035.168459][T12224] panic+0x4e2/0xcf0 [ 1035.172546][T12224] ? kmsan_get_metadata+0x41/0x1c0 [ 1035.177847][T12224] kmsan_report+0x2c7/0x2d0 [ 1035.182522][T12224] ? __pfx_ocfs2_inode_cache_io_unlock+0x10/0x10 [ 1035.189087][T12224] ? kmsan_get_metadata+0x13e/0x1c0 [ 1035.194457][T12224] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1035.200439][T12224] ? __msan_warning+0x95/0x120 [ 1035.205409][T12224] ? from_kuid+0x41e/0x990 [ 1035.210028][T12224] ? ocfs2_setattr+0x254/0x3140 [ 1035.215076][T12224] ? notify_change+0x1a8e/0x1b80 [ 1035.220210][T12224] ? do_truncate+0x22a/0x2b0 [ 1035.224997][T12224] ? path_openat+0x5c3c/0x6200 [ 1035.229968][T12224] ? do_filp_open+0x20e/0x590 [ 1035.234838][T12224] ? do_sys_openat2+0x1bf/0x2f0 [ 1035.239867][T12224] ? __x64_sys_openat+0x2a1/0x310 [ 1035.245077][T12224] ? x64_sys_call+0x120e/0x3ba0 [ 1035.250133][T12224] ? do_syscall_64+0xcd/0x1e0 [ 1035.255018][T12224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.261333][T12224] ? kmsan_get_metadata+0x13e/0x1c0 [ 1035.266709][T12224] ? kmsan_get_metadata+0x13e/0x1c0 [ 1035.272080][T12224] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1035.278628][T12224] ? kmsan_get_metadata+0x13e/0x1c0 [ 1035.284004][T12224] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1035.290570][T12224] ? kmsan_get_metadata+0x13e/0x1c0 [ 1035.295958][T12224] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1035.301969][T12224] ? kmsan_get_metadata+0x13e/0x1c0 [ 1035.307355][T12224] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1035.313437][T12224] __msan_warning+0x95/0x120 [ 1035.318241][T12224] from_kuid+0x41e/0x990 [ 1035.322712][T12224] ocfs2_setattr+0x254/0x3140 [ 1035.327579][T12224] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1035.333598][T12224] ? kmsan_get_metadata+0x13e/0x1c0 [ 1035.338976][T12224] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1035.344968][T12224] ? __pfx_ocfs2_setattr+0x10/0x10 [ 1035.350272][T12224] ? __pfx_ocfs2_setattr+0x10/0x10 [ 1035.355651][T12224] notify_change+0x1a8e/0x1b80 [ 1035.360628][T12224] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1035.367207][T12224] do_truncate+0x22a/0x2b0 [ 1035.371845][T12224] path_openat+0x5c3c/0x6200 [ 1035.376635][T12224] ? do_filp_open+0x4b/0x590 [ 1035.381436][T12224] ? kmsan_get_metadata+0x13e/0x1c0 [ 1035.386847][T12224] do_filp_open+0x20e/0x590 [ 1035.391661][T12224] do_sys_openat2+0x1bf/0x2f0 [ 1035.396521][T12224] __x64_sys_openat+0x2a1/0x310 [ 1035.401561][T12224] x64_sys_call+0x120e/0x3ba0 [ 1035.406454][T12224] do_syscall_64+0xcd/0x1e0 [ 1035.411164][T12224] ? clear_bhb_loop+0x25/0x80 [ 1035.416032][T12224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.422168][T12224] RIP: 0033:0x7f29a7d7dff9 [ 1035.426745][T12224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1035.446575][T12224] RSP: 002b:00007f29a8b8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1035.455192][T12224] RAX: ffffffffffffffda RBX: 00007f29a7f36058 RCX: 00007f29a7d7dff9 [ 1035.463329][T12224] RDX: 000000000000275a RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1035.471455][T12224] RBP: 00007f29a7df0296 R08: 0000000000000000 R09: 0000000000000000 [ 1035.479587][T12224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.487704][T12224] R13: 0000000000000000 R14: 00007f29a7f36058 R15: 00007ffcda026a68 [ 1035.495854][T12224] [ 1035.499145][T12224] Kernel Offset: disabled [ 1035.503532][T12224] Rebooting in 86400 seconds..